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Orcas Still 
Lost at Sea 
On Beta Eve 

BY DAVID WORTHINGTON 

The latest Orcas road map has 
just flown out the window: 
Microsoft vice president S. 
"Soma" Somasegar told SD 
Times in mid-April that there is 
no guarantee that the next gener- 
ation of the Visual Studio devel- 
opment environment will ship 
this year. Rather, beta 2 is the big 
milestone for 2007. 

According to Somasegar, the 
first beta bits will ship this month 
but will not be feature-complete. 
A second beta will follow later in 
2007, but Orcas' final release 
date remains nebulous. 




Microsoft can't promise support for 
future editions of .NET in Orcas, says 
Somasegar. 

"We are not in the habit of 
shipping software before it is 
ready," Somasegar explained. 

An updated road map was 

published on the product team's 

continued on page 26 ► 



Red Hat Enters Matrix 
On a Quest for SOA 

MetaMatrix buy continues middleware moves 



BY ALEX HANDY 

Is Red Hat getting ready to take 
on the big dogs — companies like 
IBM, Microsoft and Oracle? 
That's how analysts are interpret- 
ing the Linux giant's planned 
acquisition of MetaMatrix, which 
provides federated data services 
for service-oriented architectures. 

Shaun Connolly, vice presi- 
dent of product management at 
Red Hat's JBoss division, calls 
this acquisition a step on the 
road toward a bigger SOA strate- 
gy for Red Hat. 

"Signing the agreement to 
acquire MetaMatrix adds more 



federated data services. [The 
software] can federate in the het- 
erogeneous data stores that com- 
panies are dealing with. The 
MetaMatrix technology has been 
around for a while: I'm pretty 
familiar with the technology from 
my days back at Bluestone [Soft- 
ware]. The MetaMatrix offerings 
will ultimately work their way 
into the enterprise suite of offer- 
ings," added Connolly. 

Open source analyst Bernard 
Golden consults to Red Hat, 
which helped him put the Meta- 
Matrix purchase in perspective. 
"This is very much like SOA for 



data," said Golden. "SOA is all 
about 'How do I get integration 
with other applications?' This is 
all about 'How do I get integra- 
tion with the data throughout my 
organization?' " 

Michael Goulde, senior ana- 
lyst at Forrester Research, 
believes that this acquisition puts 
Red Hat in a strong position for 
offering open source SOA stacks. 
"They launched that strategy a 
year ago when they first acquired 
JBoss," said Goulde. "They clear- 
ly intend to go after the IBMs, 
Microsofts and Oracles of the 
continued on page 25 ► 



Is Microsoft Setting Its Sights on Adobe? 

WPF meets the browser as Silverlight, 
minus 3D and data binding features 




Silverlight can play digital media within Firefox. 



BY DAVID WORTHINGTON 

It may be fresh out of the gate, but 
Microsoft's Silverlight is already 
being viewed by many industry 
watchers as a potential threat to 
Adobe Systems' ubiquitous Flash 
platform. But, is taking on Flash 
Microsoft's motive, or is the real 
story more nuanced than that? 

Microsoft unveiled Silverlight, 
a platform for building advanced 
vector graphics into rich Internet 
applications, on April 16. Sil- 
verlight is a cross-browser plug-in 
formerly known as WPF/E, or 
Windows Presentation Founda- 



tion Everywhere. 

Windows Presentation Foun- 
dation is the graphical subsystem 
of .NET 3.0 and is built into 
Windows Vista. Silverlight is 
an offshoot of WPF for the Web 
that is powered by Extensible 
Application Markup Language 
(XAML) and JavaScript, making 
it interoperable with AJAX 
Web applications. However, Sil- 
verlight lacks some WPF fea- 
tures, including 3D graphics and 
data binding. 

According to Microsoft, Sil- 
continued on page 26 ► 




Jacobson Shifts From 
Processes to Practices 
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Puerto Rico: a Unique Entrepreneurial Environment 



PRIDCO,the Puerto Rico Industrial Development Company is committed to help 
you launch your technology operations in Puerto Rico through its specialized 
business development teams offering: 
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Maven Mavens Move From Mergere 

Service and support company stopped offering service and support 



BY ALEX HANDY 

When Jason van Zyl originally 
released Maven in 2004, he 
wasn't expecting to make money 
on his code; he simply wanted to 
improve upon ANT, the open- 
source build tool. Two years lat- 
er, when he signed on to work 
for Mergere — then a new com- 
pany from the creator of Glue- 
code that promised to support 
Maven users in enterprises — 
van Zyl was excited to turn his 
hobby into a paying job. 

SONATYPE IS LAUNCHED 

But six months ago, van Zyl set 
out on his own, disillusioned 
with the evolving business strat- 
egy of Mergere and its parent 
company, SimulaLabs. And last 
month, he drew the curtains 
back on his new Maven support 
company, Sonatype. 

Sonatype is a bit like Merg- 
ere 2.0, with van Zyl and some 
other former Mergere employ- 
ees concentrating on rebuild- 
ing the pieces that they felt 
Mergere bungled. Sonatype 
will offer service, support and 
training for Maven users, and 
will partner with industry ven- 
dors to build plug-ins and 
crossover projects to integrate 
Maven into the larger build 
process. Meanwhile, van Zyl's 
former employer is changing 
its name and refocusing Merg- 
ere on building the pieces of a 
SOA stack. 

"All along, the basic prob- 
lem was people coming from a 
non-open source background 
and trying to work at an open 
source company. We ended up 
using [a book van Zyl wrote 
about Maven before signing on 
with Mergere] as a marketing 
tool, and not as an education 
tool," said van Zyl. 

As such, van Zyl is now work- 
ing on another Maven book, this 
time with publisher O'Reilly 
Media. He said that, rather than 
using tliis one as a marketing 
tool, he'll give away less-techni- 
cal sections of the book online as 
a way to spark interest in the pro- 
ject, not just the company. 

But the book flap at Mergere 
was only part of van Zyl's prob- 
lem there. "I was the figurehead. 
They wanted the founders [of 
Maven] to be involved, [but] 
ultimately, we didn't have much 
control over die business strate- 
gy," said van Zyl. "There was 



never really any product strategy. 
Walking around the conferences, 
you would always get the feeling 
people were a little uneasy" with 
what the company was doing. 

That could be the reason 
that Winston Damarillo, CEO 
of SimulaLabs, is changing his 
company's name and refocusing 
it on SOA. On April 30, Damar- 
illo rebranded SimulaLabs as 
DevZuz, after the sale on April 
10 of another of his companies, 
LogicBlaze, to Iona. 

Michael Goulde, an analyst 
with Forrester Research, said 
that he's not heard any com- 
plaints in the marketplace 
about Mergere just yet. He did, 
however, say that Damarillo has 
a reputation for building and 
selling businesses quickly. "He 
does have a business factory 
there. He sold Gluecode and 




Maven developer Jason van Zyl's 
new company is focused on support. 

LogicBlaze. That doesn't exact- 
ly make for a high-quality busi- 
ness," said Goulde. 

But Damarillo now readily 
admits that Mergere is no longer 
a straight service-and-support 



company. He said that the prod- 
ucts Mergere has built on top of 
Maven will form the basis for 
DevZuz's new business model. 

"Mergere will be part of the 
core of DevZuz and stay there," 
said Damarillo. "The first part is 
Mergere Maestro. It has within 
it a binary repository engine. It's 
a takeoff from the Maven repos- 
itory with the Apache archiver 
on it. It's a single place where 
enterprises can store, inside the 
firewall, multiple components 
and put metadata on them, and 
then store them in sandboxes 
that they can lead testing 
against." 

Damarillo added that Merg- 
ere may even send clients to 
Sonatype. "We think the sup- 
port and training over compo- 
nents should be done by com- 
panies like Sonatype," he said. 



"We'll train consultants; we'll 
train training companies. We're 
going to license our training 
materials. We're working with 
people like SourceLabs to try 
and create validated reposito- 
ries," said van Zyl, adding that 
partnerships will play a big role 
in how Sonatype evolves. 

"We have a lot of partners 
who are interested. [Maven is] 
rapidly replacing ANT as the de 
facto build tool. We have more 
requests for training partners 
than we can really keep up 
with," said van Zyl. 

That seems to mirror what 
Goulde has seen in the market- 
place. "There's interest in 
Maven. Companies that are 
using a substantial number of 
open source projects and tools 
generally find Maven in there," 
said Goulde. I 



What's Driving the 'Driven' Approaches? 

Are there real differences between methodologies, or is it just marketing? 



BY JENNIFER DEJONG 

It's enough to drive a develop- 
ment manager crazy. 

Model-driven development. 
Test-driven development. Fea- 
ture-Driven Development. Re- 
quirements-driven develop- 
ment. There is even search- 
driven development. 

Use of the word "driven" to 
describe a development ap- 
proach is so widespread that 
the term has begun to signal a 
marketing strategy instead of 
a methodology for writing soft- 
ware. "You talk about test-dri- 
ven development because you 
sell testing tools. You talk about 
model-driven because you sell 
modeling tools," said Forrester 




analyst Jeffrey Hammond. 

That is not to say that model, 
test and other "driven" practices 
aren't for the most part legiti- 
mate. They are. Test-driven 
development, for example, is an 



agile practice whereby develop- 
ers don't write a single line of 
code without first creating a test 
to verify whether or not the code 
works, said Dave Churchville, 
CEO of agile project tool 



provider ExtremePlanner Soft- 
ware. Test-driven development 
is really a misnomer as the prac- 
tice is not about testing. "It's 
about the intent: making sure 
the code does what it is sup- 
posed to do." 

Test-driven development is 
a concrete, valuable practice, 
noted Forrester analyst Carey 
Schwaber. "But people misuse 
the phrase." She also said that 
tool makers are betting that the 
term "driven" will get develop- 
ment managers who depend on 
one of their offerings to buy 
additional, interrelated tools 
they sell. 

"'Driven' is the use case for 
continued on page 20 ► 



DRIVING DEVELOPERS MAD 



As tool makers embrace the term "driven" 
to characterize their particular approaches 
to designing software, the development 
community has been quick to poke fun at 
the trend. 

"It [has become] de rigueurto have some- 
thing driven by something else," wrote 
Ed Johnson in a March 2006 blog entry 
titled "Meeting Driven Development" (www 
.hacknot.info/hacknot/action/showEntry?eid 
=84). But focusing development efforts on a 
single factor is "simplistic and unrealistic," he 
said. "Software development is an inherently 
multivariate process reguiring intelligent 
compromise between competing forces." 



Johnson is a software developer and 
author of the book "HackNot: Essays on 
Software Development." His personal con- 
tribution to the "driven" trend is meeting- 
driven development, or MDD. MDD is an 
approach where all parties involved in an 
application development project convene 
frequently for, well, another meeting. The 
MDD approach is an excellent way for a 
developer to disguise his incompetence, he 
noted wryly in the blog entry. "If you're in 
over your head in some technical arena, del- 
egating all decisions to a meeting enables 
you to hide your lack of understanding and 
appear egalitarian at the same time." 



Another variant of the "driven" theme is 
resume-driven development, or RDD. RDD 
is all about choosing a language not 
because it's well suited to a particular pro- 
ject, but because acguiring skills in that 
language will help a developer bolster his or 
her resume. 

"I've seen it many, many times," said Net- 
spective CEO Shahid Shah, who coined the 
term RDD in a blog entry earlier this year 
(www.healthcareguy.com/index.php/archive 
/346). "Resume driven development tactics 
[let developers] pad their resumes so that 
their next job is easier to get." 

—Jennifer deJong 
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Oracle Opens Application Integration Architecture 

Milestone to Fusion reached; AIA to support Oracle house brands first 



BY P.J. CONNOLLY 

Oracle unveiled on April 16 
the Oracle Application Inte- 
gration Architecture, an open, 
standards-based architecture 
for business process manage- 
ment across applications from 
Oracle, ISVs and custom 
sources, while providing a step 
toward the company's next- 
generation Fusion application 
model. 

The Application Integra- 
tion Architecture (AIA) uses a 
common object model and 
BPEL (Business Process Exe- 
cution Language) to access 
the Fusion Middleware SOA 
Suite; customers will be able 
to extend the object model 
and maintain those extensions 
during upgrades to applica- 
tions. The AIA object model is 
the same as that planned for 
Oracle Fusion applications, 
and the company calls AIA an 
evolutionary step to the 
Fusion architecture. 

The company also an- 
nounced plans to deliver gen- 
eral-purpose and industry-spe- 
cific Process Integration Packs 
that enable preintegrated busi- 
ness process flows across the 
Oracle application portfolio. 
These plug into Oracle-devel- 
oped industry reference mod- 
els that provide a framework 
for common best practices, 
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ORACLE FUSION MIDDLEWARE 




Oracle's Application Integration Architecture is designed to connect 
applications and the business processes they support, in a manner that 
survives upgrade cycles. 



while allowing the use of cus- 
tom, unique processes that 
provide business advantage 
and therefore must survive 
upgrade cycles. 

The goal of AIA, explained 
Oracle vice president of devel- 
opment and strategy Jose 
Lazares, "is to deliver best-prac- 
tice, industry-specific, cross- 
application business processes 
that are prepackaged and deliv- 
ered as products. The key dis- 
tinguishing factor about these 
new applications is that they will 
be sustainable and upgradable 
over time." Lazares continued, 
"What we do is we actually map 
those [process models] to our 
actual applications, identify the 
gaps, and how we have to 



bind those together to create a 
seamless, end-to-end business 
process." 

The first two integration 



packages will work with Oracle 
E-Business Suite and the com- 
pany's Siebel CBM; the first 
focuses on the opportunity- 
quote-order process, while the 
second concentrates on the 
order-to-cash side. 

Eight other Process Integra- 
tion Packs that connect applica- 
tions from the company's JD 
Edwards and PeopleSoft prod- 
uct lines as well as the Oracle 
and Siebel brands are planned. 
These include the banking- 
focused Siebel CBM-to-iFlex 
Flexcube Account Originations, 
the Siebel Call Center Integra- 
tion Pack for Oracle E-Business 
Suite aimed at life sciences, a 
Siebel CBM-to-Oracle E-Busi- 
ness Suite package for trade 
promotions, and communica- 



tions integrations packs for 
Oracle Billing and Bevenue 
Management, Oracle Finan- 
cials and Siebel CBM. 

The remaining planned 
packs are a multi-order chan- 
nel-management integration 
pack that ties together Oracle 
E-Business Suite, Oracle Betail 
and Siebel CBM, an On- 
Demand pack connecting JD 
Edwards Enterprise One and 
Siebel CBM, the Oracle Trans- 
portation Management Integra- 
tion Pack for JD Edwards 
Enterprise One, and a People- 
Soft Financials Integration Pack 
for Oracle Financial Services 
Accounting Hub that links exist- 
ing back-office systems with 
Oracle's hub and the PeopleSoft 
general ledger. I 



Battery Ventures Scoops Up Quovadx 



BY DAVID WORTHINGTON 

Pending acceptance by share- 
holders and approval by the 
Federal Trade Commission, 
Battery Ventures entered into 
a definitive agreement last 
month to purchase Quovadx, 
including the Bogue Wave 
Software and Integration Solu- 
tions operating divisions. Quo- 
vadx's CareScience division 
was sold to the Premier Inc. 
health-care alliance in a sepa- 



rate transaction. Under the 
terms of the agreement, Quo- 
vadx s stockholders will receive 
US$137 million, or $3.15 per 
share. 

Bogue Wave is a compo- 
nent vendor for vertical mar- 
kets. Its offerings include 
Bogue Wave Hydra SOA 
framework, Source Pro C+ + , 
Stingray GUI development 
tools and the HostAccess ter- 
minal emulation product, 



while Integration Solutions 
produces the Cloverleaf inte- 
gration suite. 

Quovadx chief executive 
Harvey A. Wagner said in a 
prepared statement that the 
transactions maximized share- 
holder value and insulated 
them from risk and uncertain- 
ty in the market. The board of 
directors and management 
made a joint decision to reject 
strategic alternatives. I 
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Developers Rank G 
Among New Priorities 

Must consider Web search giant during design 



BY JEFF FEINMAN 

Google's influence over the 
Internet became evident a few 
years ago, when the company's 
name became shorthand for 
"Web search," as Internet 
users shopped for goods, 
received breaking news, or 
learned what sparked the 
Turkish War of Independence. 
In the first financial quarter 
of 2007, which ended March 31, 
Google reported revenue of 
US$3.66 billion, a 63 percent 
increase over the first quarter of 
2006. $1.71 billion of that came 
from outside of the United 
States, demonstrating the com- 



pany's worldwide popularity. 

With the dominance that 
Google displays in the world of 
search engines, a significant part 
of a Web developer's thought 
process revolves around how to 
optimize the site for Google. 

Accessibility to the site is a 
key component of optimizing for 
Google. Adam Lasnik, search 
evangelist for Google, explained 
that Googlebots collect docu- 
ments from the Web to build a 
searchable index. Lasnik said 
that a large number of sites can- 
not be spidered because they're 
accidentally blocking off bots, or 
their links are using JavaScript. 



Other obstacles to Google's 
search capabilities, Lasnik said, 
occur when Webmasters 
include a lot of content in 
Flash, or display the company 
name solely as a graphic and 
not as pure text, which will not 
be viewed in a Googlebot crawl. 

"We look at two critical 
things on the sites," Lasnik said. 
"The first thing is to see what's 
on the site, and what we find 
from crawling and indexing. 
The second is what other peo- 
ple are saying about the site, 
because of the importance of 
campaigning. The best way to 
improve rankings, typically, is to 




that 
e to 



do hardcore offline and online 
marketing. Most of the sites 
that we see doing well, do it 
with elbow grease. They engage 
in campaigns online and con- 
versations online." 

Lasnik said that one of his 
main roles with Google is to 
"travel" throughout the blogos- 
phere speaking widi developers 
and visiting popular forums. 



'We make sure that 
these title tags 
[on Spalding's 
Web site] relate to 
specific products 
so that they can be 
found very easily in 
a crawl.' 

—Bob Llewelyn, director 

of consumer marketing, 

Spalding 

Developers, he said, most fre- 
quently ask how they can get 
dieir site or more of their site 
onto Google, and how they can 
improve dieir search rankings. 

When asked how to obtain a 
strong ranking, Lasnik said, 
"There's no shortcut for having 
compelling content. If you don't 
have a site that customers find 
continued on page 22 ► 
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Adobe: Flex for All, and (It Hopes) All for Flex 

Rich Internet application framework being released as open source toward year's end 



BY DAVID RUBINSTEIN 

Flex for all. That's what Adobe 
Systems is hoping for with last 
month's announcement that the 
rich Internet application frame- 



work is being released as open 
source software. 

Jeff Whatcott, vice president 
of product marketing, said the 
release will be made toward the 



end of the year, in conjunction 
with the readiness of Flex 3, 
now code-named Moxie. The 
software will be released under 
the Mozilla Public License, 



which Whatcott said was chosen 
because it's friendly both to 
open source and to commercial 
OEM customers. 

He said that in June, the com- 




Now available for SharePoint 2007 

Build custom executive dashboards with 
data visualization solutions from Dundasl 
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pany will post public daily builds 
"instead of the usual beta pro- 
cess," and a public bug database 
will be created and functioning. 
"It'll look like the open source 
project, but we just won't be able 
to accept any code [from con- 
tributors] at that point," he said. 

Adobe is releasing tire Flex 
SDK, framework, compiler and 
some utilities in the hopes of 
driving Flex adoption, so the 
company can broaden the mar- 
ket for its FlexBuilder IDE and 
the Flex Data Services server, 
which it will continue to sell. 
Whatcott said developers could 
continue to work in the tool of 
their choice — be it Notepad, 
IntelliJ or Eclipse, for exam- 
ple — to create rich Internet 
applications, which can stream 
in audio and video and update 
data fields without having to 
page-refresh with every request. 

Other benefits to Adobe are 
that more people will be coming 
to the Flex table with ideas, fea- 
tures and code, and the open 
source contributors can make 
the application more bulletproof 
to protect against attacks or even 
unwitting mistakes that could 
jeopardize the application. 

With the open source Flex 
software, users will be able to 
create binary SWFs [a propri- 
etary Adobe file format] that can 
be served up by any Web server, 
giving developers the opportuni- 
ty to test-drive Flex and its 
MXML markup language, he 
said. 'We can only sell to people 
who have adopted Flex technol- 
ogy," Whatcott said. 

'NOT ONE SIZE FITS ALL' 

With the rise of AJAX and 
Microsoft's announcement of its 
Silverlight cross-platform run- 
time, Whatcott noted that "it's 
not one size fits all. The market 
for rich Internet applications 
has exploded in the last 18 
months. Everyone's talking 
about better user experiences." 
He did say he was puzzled by 
Microsoft, which he said did not 
take a holistic approach to richer 
applications with Silverlight. 
"They're doing what they need 
to do to have a story in the mar- 
ketplace," Whatcott said. 
"They're simply trying to drive 
more people to Windows. We 
take a different approach, and 
this open source strategy makes 
that clear. We're not about any 
particular operating system." I 



www.sdtimes.com 



. Software Development Times . May 15, 2007 . 



NEWS 



CollabNet to Create 'Uber-Suite' With SourceForge 



BY DAVID RUBINSTEIN 

CollabNet will integrate the 
SourceForge collaborative de- 
velopment platform into its own 
framework to create "an uber- 
development suite," in the wake 
of the announced acquisition of 
that intellectual property from 
VA Software. 

The integration news came 
on the heels of April's announce- 
ment that CollabNet would 
purchase SourceForge Enter- 
prise Edition (SFEE) from VA 
Software for an equity stake in 
CollabNet; no specific financial 
terms were disclosed. In the 
announcement, VA Software 
said it wants to focus on its 
media properties, including 
Slashdot.org. 

"The consolidation of 
SourceForge and CollabNet 
efforts represents the next gen- 
eration of software develop- 
ment," said CollabNet's Nick 
Bonsiglio. In 2008, the compa- 
ny will start an integration of 
the CollabNet and Source- 
Forge products, Bonsiglio said. 

RadControls Suite 
Hits Beta; Adds 
AJAX, Reports 

BY DAVID WORTHINGTON 

A beta of Teleriks latest UI 
components suite for .NET, 
announced April 23, adds a 
reporting tool and several new 
WinForms UI controls to the 
suite. 

The suite consists of RadCon- 
trols for ASP.NET and RadCon- 
trols for WinForms, with the 
new components RadControls 
"Prometheus" for ASP.NET and 
Telerik Reporting. 

Telerik Reporting is a report 
generator for Visual Studio 
2005. It features drag-and-drop 
data binding, a data source wiz- 
ard and CSS-like styling, while 
plugging into custom Tenderers 
that control appearance. 

RadControls "Prometheus" 
is a development model built 
on top of the ASP.NET AJAX 
framework. Prometheus can 
coexist with RadControls for 
ASP.NET, and is being fully 
supported while in beta. 

Telerik bundled three new 
controls into its WinForms kit: 
RadChart, RadGridView and 
RadTreeView The controls are 
unified under the Telerik Pre- 
sentation Framework. I 



CollabNet also sells an enter- 
prise collaboration product, but 
there are different strengths in 
the two sales channels and devel- 
opment teams, Bonsiglio said. 

Upon completion of the 



deal, CollabNet will immedi- 
ately integrate its CUBiT build, 
integration and testing soft- 
ware with SFEE, said Bon- 
siglio, general manager of the 
CUBiT product line. 



Bonsiglio said the platform 
is a good replacement for 
development tools from such 
companies as Borland and 
IBM, becavise those are LAN- 
based and centered around 



legacy systems. "Today, devel- 
opment is more global. How do 
you instill process and perfor- 
mance," Bonsiglio wondered, 
"when the development team is 
highly distributed?" I 
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, NEW PRODUCTS , 



Quikcycle, a company focused on the creation of lab automation and 
test management software solutions, has announced the launch of 
new application servers for easier installation, along with new versions 
of its lab automation solution, AutoLab. With the new application 
servers, the offerings automate manual steps in the preproduction 
testing life cycle for networks. The application server products allow 
for testing organizations to perform tasks related to device inventory 
control, configuration management and the scheduling of resources 
. . . Micro Focus, a Newbury, England-based provider of enterprise 
application management solutions, has intro- ^~ . MICRO 
duced Enterprise View, which allows customers \J FDCU5 
to build views of their application portfolios. It collects data about 
enterprise applications in an automated manner, delivers role-based 
dashboards, and has a framework to support IT management and out- 
sourcing initiatives. 



, UPDATES , 




DataDirect Technologies, a provider of data connectivity and main- 
frame integration solutions, has announced the latest release of its 
bidirectional XML Converters for both Java and .NET components. 
The new DataDirect XML converter release converts legacy data for- 
mats into XML and back, without a major rearchitecting of the appli- 
cation . . . Data visualization technology provider Dundas Software 
has announced the release of Dundas Gauge for .NET 2.0. Dundas 
Gauge, a visual software component, now includes AJAX integration 
and performance improvements for the Windows Forms control. It 
also has an enhanced wizard and sample library . . . Network simula- 
tor Shunra has announced Shunra VE SMB (for small and medium- 
sized businesses), a software version of the company's Shunra VE 
hardware solution that simulates a point-to-point network 
link, enabling users to test the performance of business 
applications. The offering helps users see how applications 
perform at remote desktops and can find potential problems . . . Busi- 
ness integration middleware solutions provider Fiorano has 
announced the release of Fiorano SOA 2007 SMB. The SMB mid- 
dleware includes standards-based service components, and data 
adapters reguired to build business workflows ... An updated version 
of AccuSoft's imaging software development kit, ImageGear for 
.NET, will be generally available on June 29. Among its new features 
are native .NET support for digital camera raw formats, as well as new 
image processing capabilities built into its API. ImageGear supports 
the .NET 3.0 platform . . . OpenSpan's OpenSpan Platform 3.0 
application integration solution now supports .NET 2.0 and Microsoft 
Customer Care Framework 2.6. OpenSpan has also added more 
native adapters, translators and connectors r^.^, nnn ,. _-i„ 
to help it integrate into enterprise environ- 
ments, communicate between applications, and connect to 
databases. It became available at the end of April . . . Complex event 
processing solution providers StreamBase has announced version 
3.7 of its stream processing platform. The latest release features 
new capabilities for developing and managing scalable CEP 
applications that handle real-time data. CEP works to extract mean- 
ingful events from an event cloud, based on timing, causality and 
event-driven processes ... At Collaborate 2007, Microsoft chal- 
lenged developers to design Office Business Applications (OBAs) 
that interoperate with Oracle applications for a grand prize of 
US$25,000, which will be awarded to the producer of the winning 
solution. Dubbed the 2 OBA Challenge, the contest will be open 
May 1 to Sept. 20. 



PEOPLE, 



Marilyn Daly has been named director of marketing for 
BZ Media, publisher of SD Times and Software Test & 
Performance magazine. Daly joined BZ Media in August 
2006; she was formerly the communications director for 
a labor-management organization. She graduated from 
Long Island University in 1999. 1 
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Coverity Can Cover Java 

Code scanner gets new name, adds Java support 



BY ALEX HANDY 

The Coverity Prevent source 
code security scanner has 
received a new name and a Java 
injection in the first major 
update of the software in two 
years. For the first time since 
this C and C++ scanning prod- 
uct was created four years ago, 
the security scanning tool can 
spot bugs and glitches in Java 
code. The new Coverity Pre- 
vent SQS is available now. 

With the Java scanning 
capabilities also comes a new 
plug-in for Eclipse. Coverity's 
tool includes its own issue- 
tracking database, specifically 
designed to manage the securi- 
ty holes found during scanning. 
With the new Eclipse plug-in, 
developers can interact with 
the bug-tracking system and 
use it to direct them to the off- 
sets indicated for each discov- 
ered glitch. 

Ben Chelf, co-founder of 
Coverity and its current CTO, 
said that the new Java scanning 
capabilities allow Coverity Pre- 
vent SQS to sniff out bad code. 
"There are some tilings that are 
similar to the C and C++ world," 
said Chelf, comparing the tool's 
Java capabilities to its C and 
C++ scanning. "Those are things 
like null pointer exceptions, 
things where you're not doing 
appropriate things with re- 
sources. We find places where 
you've acquired handles and not 
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released them appropriately. We 
have some checks that have to 
do with class hierarchy We've 
also got stuff to make sure you're 
doing the right thing with taint- 
ed data." 

With a price tag of around 
US$12,000 a year, Coverity is 
hoping to insinuate itself into the 
QA cycles of Java shops around 
the country. Part of the strategy 
for better integrating source 
code scanning into diese devel- 
opment houses, said Chelf, is the 
new DNA mapping system 
added to Coverity Prevent SQS. 
When code is scanned, SQS 
designs a map of the various 
libraries and code assets involved 
in the compilation process. Any 
bugs found can dien be traced 
back to the original contributor 
of the code, thus helping to 



define a clearer line of responsi- 
bility for developers. 

Additionally, Coverity has 
recently inked an agreement 
with Headway Software, maker 
of the StructurelOl software 
architecture tool. Chelf noted, 
"StructurelOl is a Java product 
that gives you a very neat view 
into your source code. You can 
drill down into the particulars. 
It's quite slick in terms of having 
whatever granularity you want to 
see, whether you're an architect 
in die grand view, or you're a 
programmer and you're right 
down in the granular view." 

The two companies have 
added integrations to dieir prod- 
ucts that allow them to work 
together, adding more visualiza- 
tion capabilities to Coverity 
reporting tools. I 



Virtualization Tops List 
Of Latest Ubuntu Features 



BY ALEX HANDY 

The name, according to its Web 
site, means "I am what I am 
because of who we all are," and 
it's certainly an apt description 
of open source software. In late 
April, Ubuntu, the Debian- 
based Linux operating system, 
saw the release of version 7.04, 
code-named Feisty Fawn. In 
both the desktop and server 
editions of the operating sys- 
tem, virtualization moves front 
and center, as do updated GUI 
and networking controls. 

Created by the South 
African company Canonical, 
Ubuntu takes advantage of the 
Debian Apt-get system, which 



automatically downloads and 
installs software of all types into 
the operating system. Since last 
May, that installable software 
has included Java packages 
from Sun Microsystems. In 
release 7.04 (which indicates 
the date of April 2007), Ubuntu 
includes Java SE 6 in those 
packages. 

Elsewhere around the oper- 
ating system, the Ubuntu team 
has concentrated on simplifying 
the overall user experience. 
That meant refining the net- 
work configuration control pan- 
els to allow for dynamic IP con- 
figuration, and overhauling 
VPN support with the aim of 



making remote connections to 
office networks simpler for 
those not intimately familiar 
with SSH tunneling. 

Ubuntu offers an updated 
search tool and adds new desk- 
top windowing effects to its ret- 
inue of functions. Tracker is a 
file system search tool, similar 
to Mac OS X's Spotlight. In 
7.04, the Tracker file search tool 
received a number of speed 
enhancements, designed to 
make searching for text in files 
much faster than before. Addi- 
tionally, 7.04 includes new desk- 
top animations, though the 
release stops short of including 
Beryl or Xgl, the next-genera- 
tion Linux 3D desktop enhance- 
ments. Those improvements are 
slated for this fall's release, 
code-named Gusty Gibbon. 

The Ubuntu operating sys- 
tem can be downloaded from 
www.ubuntu.com. I 
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Debian Founder 
Lands on Sun 

Murdock tasked with making Solaris 
more appealing to Linux community 



BY ALEX HANDY 

Ian Murdock, founder of the Debian 
Linux distribution, is already feeling 
right at home inside Sun Microsys- 
tems. When he was hired in late 
March, many expected Murdock to 
take over some of the strategic deci- 
sions around Sun's OpenSolaris pro- 
ject, but as it turns out, he's been given 
the title of chief operating systems 
platform officer and charged with 
much broader duties. That means 
Mvirdock will take up the task of evan- 
gelizing Sun's operating systems to the 
Linux community. 

But Murdock doesn't see that as such 
a burden. "Some people have the sense 
that there's a Linux- versus- Sun dynamic, 
but that couldn't be further from the 
truth. There's certainly competition with 
commercial Linux vendors," said Mur- 
dock, adding that business competition 
does not translate into contempt for the 
overall Linux community. 

In fact, much of Murdock's job will 
be to present Solaris to the Linux mass- 
es as a reasonable solution. "My primary 
task is going to be making Solaris more 
appealing to the Linux crowd. I'll tiy to 
figure out how to make Solaris more 
familiar to Linux people," said Murdock. 
And that's no small feat, acknowledged 
Murdock. He said that, in the early 
1990s, he ogled many a SparcStation, 
hoping to have access to such power in 
his own dorm room. He instead began to 
build his own operating system, in order 
to bring the power of a Unix workstation 
to a desktop. 

Thus ended Murdock's love affair 
with Solaris, until this March. After he 
joined Sun, Murdock began a crash 
course in relearning the operating sys- 
tem that he so long ago left behind. "The 
work I did on Linux was done because I 
had much more time than money, and 
couldn't afford a Sun workstation by any 
stretch of the imagination," said Mur- 
dock. And now that he's back in the 
Solaris world, he's using himself as a 
guinea pig for making the transition 
from Linux to Solaris. 

PASSING THE TORCH? 

Leaving behind the community to which 
he contributed so much over the years 
isn't entirely bitter for Murdock. "The 
biggest challenge Linux has this year — 
and the year before that and the year 
before that — is staying a single platform, 
instead of becoming a whole bunch of 
different platforms. It's the same prob- 
lem that Unix faced. If you are a devel- 





Murdock says he's feeling right at home in 
Sun's collaborative environment. 

oper, and you are faced with the task of 
writing a program for Linux, what does 
that mean?" asked Murdock. 

Indeed, that's a problem also cited by 
Mark Shuttleworth, CEO of Canonical, 
the South African company behind 
Ubuntu Linux, which is based on Mur- 
dock's Debian Linux. Said Shuttle- 
worth: "I think the greatest challenges 
have to do with figuring out how to 
work with device driver manufacturers 
who are dealing with multiple distribu- 
tions and multiple versions of the ker- 
nel. The model is phenomenal for incre- 
mental development. But it makes it 
very difficult for driver manufacturers 
to figure out what environment they 
need to target." 

And yet, Murdock recently left the 
newly formed Linux Foundation, a 
group that has stepped vip its attempts 
to calm the waters between the various 
distributions of Linux. Shuttleworth, on 
the other hand, was appointed to the 
board of that organization at about the 
same time that Murdock was leaving. 

But Murdock isn't showing any signs 
that he misses the Linux Foundation. 
In fact, he said that he's feeling quite 
comfortable inside of Sun. "We're all 
just engineers," said Murdock. "I'm 
finding a lot of the same collaborative 
environment that I'm used to. One nice 
thing about Sun is that it's very much a 
distributed workforce. People are all 
over the place, and the network as a 
collaboration tool tends to be used in 
more ways than I'm used to." I 
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SAP Continues 
Microsoft Duet 

Integration tools road map 
detailed, 2.0 release in '08 



BY DAVID WORTHINGTON 

Microsoft and SAP are contin- 
uing to make music together, 
having outlined their joint road 
map for Office-SAP integra- 
tion through version 3.0 of 
Duet at SAP's SAPPHIRE '07 
conference. Duet, a joint ven- 
ture of the companies, con- 
nects SAP business processes 
and data with Microsoft Office 
applications. 

Duet 2.0 will arrive in late 
2008. An SAP spokesperson 
said that Duet will leverage the 
enterprise SOA capabilities of 
its upcoming SAP Business 
Suite. Users select and repur- 
pose SAP services stored in a 
central repository to integrate 
with Office applications and 
Office SharePoint Server using 
Duet's developers' tools. 

Other features that the com- 
panies have slated for the 
releases will enable new busi- 
ness scenarios for sales and sup- 
ply-chain management, with 
added support for governance, 
risk and compliance scenarios. 
New templates and develop- 
ment tools can adapt existing 
scenarios and create new ones. 
Duet also expands SAP Busi- 
ness Suite applications to sup- 



port unstructured collaborative 
processes through Microsoft 
Office SharePoint. 

"This [road map] shows con- 
tinued support and investment 
as [Microsoft and SAP] are 
moving toward building out 
versions 2.0 through 3.0. Of the 
2.0 announcements, Share- 
Point integration and reusable 
templates significantly benefit 
users the most," said Ray 
Wang, senior analyst at For- 
rester Research. 

The Duet road map was 
announced on the eve of 
Microsoft's own CRM concerto. 
During March's Convergence 
2007 conference, Microsoft 
CEO Steve Ballmer stressed that 
SAP was Microsoft's biggest 
competitor in the enterprise 
market. Redmond has set its 
sights on SAP, moving beyond its 
existing small and medium busi- 
ness (SMB) solutions to offer 
hosted services for the midmar- 
ket. Microsoft Dynamics CRM 
Live is still planned for this year, 
according to the company. 
Microsoft Dynamics (formerly 
Great Plains) targets the supply- 
chain, CRM, financial and ana- 
lytical needs of SMBs, compet- 
ing with SAP and others. I 
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TIBCO's Business Studio uses BPMN for modeling rules and processes, to help managers visualize improvements. 

Project TIBCO ONE Takes Shape 



BY DAVID WORTHINGTON 

A new edition of TIBCO Soft- 
ware's Business Studio model- 
ing environment will hit the 
Web this month, as the first 
deliverable of a grander infra- 
structure strategy — dubbed 
TIBCO ONE— that was out- 
lined by the company on May 1. 
ActiveMatrix Policy Manager is 
Project ONE's second compo- 
nent and is destined to become 
the common runtime container 
across all TIBCO products. 



Mariner to Voyage PPM Seas 



BY JEFF FEINMAN 

Serena was expected to intro- 
duce on May 14 what it's calling 
the first integrated project and 
portfolio management (PPM) 
solution, Serena Mariner, with 
capabilities that provide project 
costs and benefits, along with 
application development and 
maintenance costs. 

In the past, criticism of pro- 
ject management has focused 
on its inability to solve compli- 
cations in delivery, or give 
accurate reads on the progress 
of a software project. As such, 
software tools vendors were 
slow to work this feature set 
into their offerings. 

"Project management often 
reports on how much people 
say they've done, but it doesn't 
really understand how much 
they have done," noted Carey 



Schwaber, senior analyst with 
Forrester. 

When asked why PPM has 
been an afterthought in the 
application life cycle, Matt 
DiMaria, Serena's senior vice 
president of worldwide market- 
ing, said, "The data that was 
related to projects was really 
[manually] extracted from or 
reported by applications devel- 
opment, and then transferred 
into the project management 
infrastructure. Now the tools 
have matured in project man- 
agement, so there's a huge 
opportunity to automate most 
of that activity." 

According to DiMaria, Sere- 
na Mariner is the only PPM 
offering that provides complete 
visibility of all the key metrics in 
a project throughout the applica- 
tion life cycle. Some of those key 



metrics, he said, include deliver- 
able status, demand manage- 
ment, financial metrics and pro- 
ject management. The goal is to 
enable IT to put the right people 
into the projects for which they 
are most qualified, he said. 

Jon Scumniotales, vice pres- 
ident of products for Serena, 
said that reports and analytical 
views come prepackaged with 
the application. "The key thing 
with Mariner is that these are 
reports of live data, so IT and 
business people can drill down 
and view issues with the portfo- 
lio, projects at risk and actual 
defects," he said. 

Serena Mariner offers pack- 
aged integrations to other Serena 
tools, including Dimensions 10, 
the company's core application 
development tool, and the Team- 
Track IT process manager. I 



Business Studio 2.0, like its 
predecessor, will be available at 
no cost. The new bits tighten 
collaboration between business 
and IT users, and build out the 
feature set to support new stan- 
dards and provide a wider array 
of capabilities. 

TIBCO has added user-spe- 
cific functionality for both busi- 
ness and IT users. When users 
launch Business Studio, they 
select between the two per- 
sonas, getting the appropriate 
"lens" into the common reposi- 
tory, said Jeff Kristick, senior 
director of product marketing 
at TIBCO. The full view is cus- 
tomizable, he added. 

Business Studio now supports 
Business Process Modeling 
Notation (BPMN) and XML 
Process Definition Language 
(XPDL). The first depicts the 
steps in a business process, and 
the second is for the storage and 
exchange of process diagrams. 

TIBCO selected the Unified 
Modeling Language to create 
data domain models that 
conceptualize the sharing of 
data associated with business 
processes, due to its maturity, 
Kristick noted. Business Studio 
includes a drag-and-drop UML 
palette for data modeling. 

Processes modeled using 
other design tools can be 
imported if they use XML- 
based definitions. IDS Scheer's 
Aris and Microsoft's Visio are 
supported out of the box; cus- 



tomers can create their own 
templates to convert additional 
formats. 

"Process models are needed 
to help business and IT man- 
agers understand actual pro- 
cesses and enable them, by visu- 
alization and simulation, to 
propose improvements," Janelle 
Hill, a Gartner analyst, said in a 
statement. 

Other improvements are 
expanded reporting capabilities 
and collaborative version con- 
trol system for tracking and 
rolling back changes. 

THE SECOND PILLAR 

ActiveMatrix 2.0 is slated to be 
generally available in the sec- 
ond half of 2007. TIBCO's 
BvisinessWorks integration soft- 
ware and adapters will run on 
ActiveMatrix containers, and 
ActiveMatrix will be extended 
across all TIBCO products, said 
Kristick. It will have support for 
Service Component Architec- 
ture, an emerging standard for 
SOA design principles. 

Project ONE encompasses 
all TIBCO products to deliver a 
platform for companies to build 
infrastructure applications. "We 
are seeing that the trend of cus- 
tomers buying large package 
applications has passed," Kri- 
stick remarked, adding that 
customers want to use reusable 
applications, with BPM and 
events processing mixed in 
where applicable. I 







Some highlights for this 
year's event include: 

• Inspiring keynote sessions by industry 
experts and IBM leaders on governing 
software and systems delivery. 

• More than 20 hands-on technical 
workshops, showing how IBM products 
support every phase of the software 
lifecycle. 

• Over 285 sessions, including new and 
expanded tracks. 

• SOA development and governance 

• The latest techniques in quality 
management 

• Application development, deployment 
and production 

• Managing the impact of regulatory 
compliance and geographically 
distributed development 

• A high-energy Exhibit Hall where you can 
preview Rational's plans for the future as 
well as see advanced solutions and 
technologies from IBM and our Business 
Partners. 

• Interactive Birds-of-a-Feather sessions. 

• Free IBM Certification Testing. 

• Premier of winning Rational Tube videos. 
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Don't miss this year's IBM Rational 
Software Development Conference! 

Join the 2,500-plus great minds from around the world 
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and experience first-hand why they keep coming back 
year after year. Be refreshed, learn, network with 
colleagues and have a great week! 



Register Now 

and SAVE! 



Save $200 on your registration fee 
by using this discount registration 
code: SLS07 
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IBM Rational Conference Hits 10-Year Mark 



BY DAVID WORTHINGTON 

June 10 marks the 10th 
anniversary of the IBM Ratio- 
nal Software Development 
Conference, and this year's 



Rational?" 

Collaboration, delay antici- 
pation, process automation, 
project visibility and using best 
practices are among the topics 



2,500 attendees from around 
the globe will be present. 

Danny Sabbah, the general 
manager of IBM Rational Soft- 
ware, and Jamie Thomas, vice 



Software Development, will de- 
liver Monday's keynote address. 
A technology keynote titled 
"The Future of Software 
Delivery" will be delivered the 



theme is: "What Keeps Me to be discussed, while some president for IBM Rational following day. 



Trying to be agile 
when your Java code is fragile? 
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Feeling the pressure to release software 
faster? Are you bringing new features to 
market as quickly as your business demands? 

If enhancing or extending your Java 
application feels risky - if you need to be 
agile, but instead find yourself hanging on by 
a thread - AgitarOne can help. 



With AgitarOne's 
powerful, automated unit testing features, 
you can create a safety net of tests that 
detect changes, so you know instantly when 
a new feature breaks something. Now you 
can enhance and extend your Java applica- 
tions - fast, and without fear. And with 
AgitarOne's interactive capabilities for 
exploratory testing, it's easy to test your 
code as you write it. 

Whether you're building a new 
application, adding new features to existing 
software, or simply chasing a bug, AgitarOne 
can help you stay a jump ahead. 
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The IBM Rational Software 
Development Conference will 
provide free IBM certification 
testing, and will offer 285 ses- 
sions, some with new and 
expanded tracks, complement- 
ed by 20 hands-on technical 
workshops centered on the 
software life cycle. 

The Exhibit Hall will pro- 
vide a glimpse into the future 
of IBM Rational, and will have 
exhibits showcasing solutions 
and technology from IBM and 
its business partners. IBM 
product team members and 
industry experts will be in 
attendance. 

Registration information 
about conference rates and 
discounts is available on the 
event's Web site. A full 
description of the conference's 
agenda is also published 
online. The conference is 
being held at the Walt Disney 
World Swan and Dolphin 
Hotel in Orlando, Fla. I 



DawjfcnpmaiVt Cmlnrci»rt 2007 



CONFERENCE: June 10-14 

Walt Disney World Swan and Dolphin 

Hotel, Orlando, Fla. 

SESSIONS: 

Sunday, 9:00 am-6:00 pm 
Monday, 8:00 am-5:30 pm 
Tuesday, 9:45 am-5:00 pm 
Wednesday, 9:45 am-5:30 pm 
Thursday, 8:30 am-10:45 am 

TECHNICAL WORKSHOPS: 
Sunday, 12:00 pm-4:45 pm 
Monday, 9:45 am-12:45 pm 
Tuesday, 2:45 pm-5:45 pm 
Wednesday, 2:45 pm-5:45 pm 

EXHIBIT HALL AND 
IBM SOLUTION CENTER: 
Monday, 5:00 pm-8:00 pm 
Tuesday, 11:30 am-2:00 pm 
Wednesday, 11:30 am-2:00 pm 

KEYNOTES: 

Monday, 8:00 am-9:30 am, 

Danny Sabbah, general manager, 

IBM Rational Software; Jamie 

Thomas, VP, IBM Rational Software 

Development 

Tuesday, 8:00 am-9:30 am, 
"The Future of Software Delivery," 
Martin Nally, CT0, IBM Rational 
Software; Lee Nackman, VP, product 
development & customer support, 
IBM Rational Software; Rod Smith, 
VP, emerging technologies, IBM 
Software Group 

www-306.ibm.com/software 

/rational/events/rsdc2007 
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Gomez Creates QA Applications On-Demand 



BY JEFF FEINMAN 

On-demand Web application 
management solution provider 
Gomez announced at BZ 
Media's April Software Test & 
Performance Conference what 
the company claims are the 
industry's first on-demand QA 
applications. BZ Media publish- 
es SD Times. 

Gomez On-Demand QA 
Solutions consists of three 
products: Reality View XF, 
Reality Check XF and Reality 
Load XF. Officials at Gomez, 
based in San Mateo, Calif., said 
their approach is unique in 
bringing an on-demand, pay-as- 
you-go offering that is purely 
Web-based. The tools leverage 
open source frameworks and 



Hatching SaaS 
With Partners 

BY DAVID WORTHINGTON 

Microsoft's SaaS Incubation 
Center Program will match Mi- 
crosoft's hosting partners togeth- 
er with ISVs that wish to adopt 
its software-as-a-service model. 
The hosting partners will provide 
ISVs with consulting services 
and access to a hosting channel 
on Microsoft's behalf. The pro- 
gram, announced on April 16, is 
complemented by Phase II of 
Microsoft's SaaS On-Ramp soft- 
ware discount program. 

Business and architectural 
consulting sessions for ISVs will 
be hosted at facilities operated 
by Microsoft partners. Accord- 
ing to Microsoft, its partners 
will utilize the Microsoft Solu- 
tion for Windows-based Host- 
ing for Applications as the 
standard platform architecture 
for participating ISVs. 

Discounted licensing for 
Windows Server and Microsoft 
SQL Server is available through 
the SaaS On-Ramp program. 
Licenses may now be obtained 
from enrolled hosting providers, 
no longer just from Microsoft. 

James Governor, an analyst at 
IT analyst firm RedMonk, said 
that Microsoft watchers should 
not confuse tire Incubation Cen- 
ter Program with Microsoft's 
own Live brand of services." 
This is really just meeting a mar- 
ket requirement," he observed. 
"The SaaS Incubation Centers 
make a great deal of sense." I 



are delivered as a service. 

Reality View XF is used for 
the visual testing of Web sites, 
and offers the ability to take a 
single script created in an IDE 
and then automate the test 



across multiple Web browsers. 
Arthur Mateos, head of QA 
Solutions at Gomez, claimed 
that this ability was not avail- 
able in the market beforehand. 
Reality Check XF is an auto- 



mated functional checking 
product, and Reality Load XF 
offers external load testing. 

"Gomez On-Demand QA 
Solutions provides developers 
with the tools they need to devel- 



op high-quality Web applica- 
tions," said Mateos, who added 
that a large increase in the use of 
Web-based applications is dri- 
ving the need for enhanced qual- 
ity assurance tools. I 



89% of our customers renew 
their RadControls subscriptions. 
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• Widest cross-browser support 
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Spring 2.1 Bouncing Toward Completion 

Interface21 adds annotations, Java SE 6; Web Flow 1.1 extends framework 



BY ALEX HANDY 

Just in time for JavaOne, Inter- 
face21 released a preview edi- 
tion of the Spring application 



framework, version 2.1. This 
new edition adds support for 
Java SE 6 features, and adds 
annotations as a new path to 



including metadata with source 
code. At the same time, the 
company released a preview of 
Spring Web Flow 1.1. Both 



pieces of software should be 
generally available in a final 
form in early June. 

Rod Johnson is the creator of 
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the Spring framework and co- 
founder of Interface21. He said 
that the key to Spring's success is 
that the company is responsible 
for 95 percent of the code con- 
tributed, unlike most open 
source projects. That means, 
Johnson noted, drat Spring stays 
rigidly focused on ease of use 
and integration with Interface21 
projects, such as AspectJ. 

For version 2.1, said John- 
son, the focus was largely on 
the use of annotations. He 
added that 2.1 features 
"increased ability to use Java 
annotations to express configu- 
ration in source code as well as 
externally in XML files." 

While Johnson maintained 
that annotations were not the 
best way to add metadata to a 
source code file, he said that the 
community pushed for the new 
features. "There is an interest in 
the Java development communi- 
ty in trying to leverage annota- 
tions as source-level metadata. 
We've always taken the view drat 
an annotation-centric approach 
is somewhat limiting, in that [it 
doesn't] scale for complex issues. 
In 2.1, we provide a combination 
where [developers] can use 
annotations in configuration, and 
use Spring's existing configura- 
tion capabilities," said Johnson. 

GOING WITH THE FLOW 

Johnson also spoke about Web 
Flow 1.1, which he said extends 
the Spring development model 
to Web applications. New to 
version 1.1, said Johnson, is 
greater integration with Java- 
Server Faces (JSF). 

"The main new feature in 
there is integration with JSF. It 
was possible to use [Web Flow] 
with JSF before, but it wasn't a 
tremendously natural synergy. 
The difference in Web Flow 1.1 
is that the two fit veiy naturally 
together," said Johnson. 

Spring Web Flow also brings 
better AJAX support to Java 
Web developers, said Johnson. 
"One nice characteristic is that 
by combining JSF and Web 
Flow, we get very nice support 
for AJAX. One of the benefits of 
the flow system is that there is 
an awareness of state, within the 
flow system," said Johnson. 
That, he added, makes it much 
easier for developers to send 
multiple messages to the server 
from the browser. I 
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Web Tool Schools Developers on Security 



BY JEFF FEINMAN 

Security Innovation released in 
mid- April TeamMentor, a Web- 
based application security 
learning and knowledge man- 
agement system for software 
development. 

TeamMentor is a repository 
of learning modules and secure 
development assets, such as 
coding practices, libraries and 
checklists, that are reusable 
across multiple development 
teams. The offering provides 
guidelines and vulnerability 
information — on an interface 
modeled around Google. 

Peter Jenney, vice president 
of strategy for Security Innova- 
tion, said that developers could 
leam how to implement authen- 
tication systems by using Team- 

Palamida Joins 
Vulnerability War 

BY DAVID RUBINSTEIN 

Palamida, a provider of intellec- 
tual property management soft- 
ware, released last month the 
Vulnerability Reporting Solu- 
tion (VRS), which extends the 
company's IP Amplifier code 
audit tool to locate and help pri- 
oritize vulnerabilities in open 
source code. 

VRS gives Palamida a new 
level of information in its asset 
database that it never had 
before, according to company 
co-founder Theresa Bui Friday. 
Palamida has taken its library of 
open source code and added 
vulnerabilities from the U.S. 
government's National Vulnera- 
bility Database. VRS capitalizes 
on the enhanced automated 
analysis functionality built into 
IP Amplifier (version 4.1 was 
also released last month) to help 
eliminate false positives. 

"It knows you have a certain 
version of software and knows 
what vulnerabilities have been 
reported," Bui Friday said. 
"The first step to security best 
practices is knowing what you 
have." 

IP Amplifier version 4.1 also 
offers a scripting language for 
creating IP audit tests. "IP audit 
is a fairly new business pro- 
cess," said Bui Friday. The 
Palamida tools, she said, allow 
users "to customize the kinds of 
tests they want and dictate the 
level of forensic detection — 
down to every code snippet, or 
simply a quick pass." I 



Mentor. The tool can also teach 
developers how to build appli- 
cations that are not susceptible 
to SQL injections, cross-site 
scripting attacks and buffer 
overflows. Jenney said the offer- 



ing lays out countermeasures 
for vulnerabilities specific to 
different programming lan- 
guages, and also provides refer- 
ences to outside sources, includ- 
ing Microsoft and OWASP, the 



Open Web Application Security 
Project. 

"The earlier in the process 
that you catch a problem, the 
cheaper it is," Jenney said. "Our 
strategy is to get this thing out 



in the field and to constantly fill 
it as we collect more informa- 
tion from the front lines, then 
get it into the knowledgebase. 
We're going to have revisions of 
the product in the near future 
that provide defenses against 
vulnerabilities that just hap- 
pened, rather than things that 
are already well known." I 




RadAjax Prometheus' 

FOR ASP. MET BETA 



The express route to ASP.NET AJAX development 



Introducing the first productivity tool for Microsoft ASP.NET AJAX: 
■ No need to place multiple update panels 

• No need to set nu meruit* triggers 

* No need to write a single line of code 

. No need to modify your existing applications 



Postback based Ql 
application 






learn how to wo rfe 
with ASP.NET AJAX 



Df op RadAjBK Man ager 
cfiUiefefm 



Place update paneJs 



Set triggers 



Tidk a few chsdttraxes 



dick OK 



application 




j Set more ft lgge«. 



Place more u pdate panels 






Pair of H9dCornrofc "l k rtnn«irhpii[" Buw for ASp.n^ t 



ytelerik 

wwWntelerik.com/prometheui 



CcwtW * i'JC *"*• <" iK"i -".ifl'rtu ft- gram wn ire oraaviy of Sue inHU-a ■:-f , jfi MoukF: d a nrgoerrc rasrfund McikkiL Ccgcnirien ic *» Lrriud Bbu jna oph e>j i*cn 



NEWS 



18 . I1LIIU . Software Development Times . May 15, 2007 . 



www.sdtimes.com 



www.rssbus.coi 



RSSBus 



beyond blogging 

new ways to connect your data 



An integrated framework of tools and services that use 
simple protocols such as RSS and ATOM to deliver a rich 
set of services through structured information feeds with 
rich data points, enabling simple yet powerful ways to 
connect users, applications, and systems. 
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RSSBUS 
FEED SERVER 



Easily create dynamic RSS feeds from 
Databases, Spreadsheets, Directories, 
and other information sources. 

Choose from hundreds of available 
connectors for various systems and 
applications, or build your own 

Use RSS feeds as Simple Web Services to 

COMMUNICATE WITH YOUR PARTNERS, 
VENDORS, AND CUSTOMERS 



- free trial at www.rssbus.com - 



From Processes 
To Smart Practices 

Jacobson shifts gears, creates EssWork 



BY DAVID WORTHINGTON 

Ivar Jacobson, one of the "fathers" of the 
Rational Unified Process, is traversing 
the globe to discuss why practices are 
more useful than processes. And he has 
devised a new paradigm called Essential 
Work to prove it. 

First and foremost, Jacobson made 
clear in an exclusive interview with 
SD Times that he believes developers 
should be able to pick and choose 
what practices and principles are best 
for their organization. 
He advocated improving 
capabilities one at a time, 
instead of being forced 
to take all of an entire 
process at once. Prac- 
tices are first-class citi- 
zens, Jacobson noted; 
they are small, useful 
things that matter. 

Jacobson observed 
that while it may be hard 
to go to a client and say 
that it does not need all 
of the Rational Unified 
Process (RUP), the in- 
dustry's penchant to fol- 
low branded processes is 
unsustainable. Process- 
es, a soup of different ideas coming 
together, are "ideas that became too 
big," he said. 

Jacobson pointed out that no one is 
good at everything, and quipped that 
people just do not like processes. 
Processes are often out of sync with 
what the organization is doing. 

Instead, he recommends that organi- 
zations focus on which practices they are 
good at and put together what they need 
to canonize them by selecting from any 
process. Case-driven development, iter- 
ative development and project manage- 
ment a la Scrum are all examples of 
sound practices that can be applied indi- 
vidually or used in combination. 

According to Jacobson, teams find 
themselves getting stale or becoming 
bloated, "bolting on" more information 
to their practices. They struggle to mix 
and match practices from various 
sources into a coherent way of working, 
or worse, not even knowing where to 
start their improvements. 

PRACTICES SHOULD BE SMART 

That is why Jacobson advocates Essential 
Work, or EssWork, an environment for 
working with practices. EssWork uses 
descriptive cards with essential informa- 
tion about different process elements, 
such as competencies and the things 
developers need to produce. The cards 
are supported by essential guidelines and 




'American software 
developers have a 
problem.' 

—Ivar Jacobson 



references. R does not have written doc- 
umentation, because people do not read 
the stuff, Jacobson explained. 

"We have lived under the assumption 
that people read books; very few people 
read books," said Jacobson. "I am happy 
to travel around the world to tell them 
what is in my books." 

Jacobson said that developers should 
be playful and use a game metaphor 
to innovate the way processes are 
collected, presented and applied. Orga- 
nizations describe their 
own practices using the 
game board. Cards with 
practice descriptions are 
used to start moves and 
record where one is, and 
what one wants to 
achieve, creating a pro- 
cess. This can align peo- 
ple, processes and cur- 
rent practices, he said, 
recommending three col- 
laborative games: devel- 
opment, a planning game 
and a process improve- 
ment game. 

Training materials are 
provided as needed with 
EssWork, but more im- 
portant, Jacobson noted, EssWork uses 
intelligent agents, which provide knowl- 
edge that programmers may require for a 
task. He added that agents are a very 
effective way to provide extra knowledge 
to people who are inexperienced in tak- 
ing a next step, or to provide experienced 
team members with small patterns that 
they always do. 

"Smart practices help you do the job, 
if you want it, when you need it — not 
before," Jacobson said. "And they are 
not just a dream; we have developed 
intelligent agents to support use cases 
and testing." 

Jacobson referenced Ridian software 
behemoth Tata Consultancy Services, 
which he said achieved a 20 percent 
reduction in operating cost by using 
agents. "American software developers 
have a problem," Jacobson opined. "For 
30 years, American programmers want- 
ed to work more like creators, and think 
everything they did was creative. Only 
20 percent of work is brainwork; other- 
wise, eveiyone does the same thing over 
and over again. You can increase that 
[brainwork] to 60 percent, using agents." 
Jacobson concluded, "The Ridian 
programmer does not have this prob- 
lem. They are happy to find the best — 
not optimum — solution. There should 
be more brainwork and fewer mundane 
tasks. We can't afford to spend so much 
time developing software as we do." I 
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What's Driving the 'Driven' Development Approaches? 



-4 continued from page 3 

integration," she said. "You have 
one tool; you need to buy the 
next. That is why vendors like 
[the term]." 

Feature-Driven Develop- 
ment isn't about tools at all. It's 
an agile methodology, much 
the same way Extreme Pro- 
gramming (XP), Scrum and 
Crystal are, said Churchville. 
The approach is based on sto- 
ries, known as features, that 
detail how a user will interact 
with an application, he 
explained. 

THE CASE FOR MODEL-DRIVEN 

But sometimes "driven" is part 
of a new name for an old idea, 
said Churchville. "Model-dri- 
ven development used to be 
called CASE, he noted, refer- 
ring to the acronym for Com- 
puter-Aided Software Engi- 
neering. "It's a rebranding, a 
second coming." 

That said, model-driven 
development refers to a specific 
practice where diagrams creat- 
ed in the Unified Modeling 
Language (UML) are used not 



just as a visual guide, but also as 
the foundation for an applica- 
tion, said John Carillo, a senior 
director for Telelogic, which 
sells modeling and require- 
ments tools, among other offer- 
ings. "Model-driven develop- 
ment is about generating code, 
and using that code as the basis 
for an application," he said. 

Telelogic, among other com- 
panies, also uses the phase 
"requirements-driven develop- 



ment" in its marketing litera- 
ture. The concept is tightly 
interwoven with, and "extreme- 
ly complementary" to, model- 
driven development, Carillo 
said. "The State diagram brings 
requirements to life," he said, 
referring to one of 15 diagram 
types included in the UML. 

Forrester's Schwaber said 
she wasn't so sure that require- 
ments-driven development is a 
practice in its own right. "What 



is it?" she wondered. 

Model- and test-driven de- 
velopment are essentially a way 
of expressing best practices, said 
Koders CEO Darren Rush. 
That is why the company adopt- 
ed the term "search-driven 
development" to characterize its 
offerings, which let developers 
search existing codebases for 
components and other artifacts 
they can reuse in new applica- 
tions (see "Now, Search Gets 



Behind the Wheel," below). 

In the end, one "driven" 
approach isn't necessarily any 
better than another, said For- 
rester's Hammond. It's about 
identifying the core organizing 
principle of that particular 
development approach. 

But there is also "a lot of 
marketing going on," he said. 
"What are we going to see 
next — customer-driven devel- 
opment?" I 



Now, Search Gets Behind the Wheel 

Finding assets first speeds development, says Koders CEO 



BY JENNIFER DEJONG 

Searching for a way to charac- 
terize his company's offerings, 
Koders CEO Darren Rush 
settled on the phrase "search- 
driven development." 

The term accurately de- 
scribes a practice Rush believes 
all developers should engage in: 
Instead of writing every line of 
an application from scratch, 
solve simple programming 
problems by tracking down 



code available for reuse. 

The company's offerings let 
developers search existing 
codebases, for components, 
classes, methods and inter- 
faces that they can incorporate 
in their own projects. Rush 
said that www.koders.com is a 
free service that essentially 
indexes the open source code- 
base. Koders Enterprise, 
which starts at about US$250 
per user, allows developers to 



also search their company's 
internal repositories. The 
enterprise product connects to 
virtually all version control 
systems, such as open source 
CVS and IBM Rational 
ClearCase, indexing code on 
the server on which it lives, he 
said. 

In theory, developers who 
work with the same company 
should be able to share code 
among themselves, said Rush. 



"But when you have more than 
1,000 developers, that level of 
collaboration is difficult to 
achieve." 

Asked whether the phrase 
"x-driven development" is over- 
used, Rush did not answer 
directly. He said the term has 
evolved over time. Originally, 
terms such as "test-driven 
development" were used as a 
way of describing how modifi- 
cations were made to agile pro- 
jects, such as those based on 
the Extreme Programming 
methodology. But today "dri- 
ven" is synonymous with best 
practices, he said. I 
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Google Ranks as Developer Priority 



■* continued from page 5 

useful, yovi have nothing. The 
main foundation is making a site 
that is accessible and has com- 
pelling content, and then you 
can use the Webmaster tools 
like sitemaps and crawl infor- 
mation to optimize the site." 

Links play an important role 
in creating a Google-friendly 
site, as they help Googlebots 
find a site. Google's PageRank 
uses links as an indicator of 



a page's value, by counting how 
many times a link is used, and 
text-matching techniques that 
display pages that are important 
and relevant to each search. 

Bob Llewelyn, director of 
consumer marketing for sport- 
ing goods manufacturer Spald- 
ing, said that his company's 
Web site uses title tags to 
optimize Web pages for 
Google. 

"We make sure that these 



title tags relate to specific 
products, so that they can be 
found very easily in a crawl," 
Llewelyn said. 

Llewelyn said that the Web 
team decided against using Flash 
files, because the company want- 
ed to bring more individuality to 
each page and because Google 
recommends that companies not 
use them, due to difficulty in 
crawling them. 

Will Thomas is vice president 



of digital media for Visual Con- 
cepts, the company that main- 
tains Spalding's site. When asked 
if his Web team takes Google 
into account while program- 
ming, Thomas said, "It is some- 
thing that we make sure that we 
are aware of as we're developing 
the site. It's something that 
should be done during the 
development part of a Web site. 
Treating search engine opti- 
mization as an afterthought can 



ALGORITHMS ARE FORMULA FOR GOOGLE SUCCESS 



BY JEFF FEINMAN 

What is the reason for Google's 
dominance over other search 
engines? 

Many credit Google's supe- 
rior search technology for 
vaulting the company over 
competitors such as Ask, Lycos 
and Yahoo. Others point 
out that Google's innovative 
method of auctioning ads 
alongside search results is what 
turned it into a billion-dollar 
company. 

Charlene Li, analyst with 
Forrester Research, credits 



Google's success mainly to a 
strong search engine algorithm, 
a superior sense of page rank- 
ing, and its large volume of 
search engine users. Search 
engine algorithms mainly in- 
volve the frequency and loca- 
tion of key words. A search 
engine will analyze how often 
key words appear in relation to 
other words on a Web page. 

"They can tell, based on 
search results that come in, if 
something is ranked as Num- 
bers 3 and 4 and it's getting a 
lot more clicks," Li said, talk- 



ing about Google's search 
algorithm. "When they do a 
revision of the algorithm and 
they see that people found 
[search items] 3 and 4 more 
relevant and clicked on it 
more, it might actually go 
higher. They have a lot more 
data points to say if a search 
engine is effective or not." 

Other search engines sport 
an algorithm similar to Google, 
Li said, but Google was the 
first to have such a successful 
piece. Li was not the only ana- 
lyst that noted Google's first- 



to-the-mark status. 

"Google got there first and 
established good partners, 
and they're very fast and 
focused on what they do," said 
Thomas Murphy, analyst and 
research director for Gartner. 
"To that point, look at what 
Google is still doing today. They 
recently added the Google tool- 
bar feature, but if you want 
News, Maps, Video and other 
items, it all comes separate. 
Everyone else has always taken 
the 'give them more, that's what 
they want' approach." I 



be a mistake because it may 
require you to go back and redo 
some work as far as the way you 
structure the site or the way you 
structure pages and content." 

Thomas said it's imperative 
for Spalding to have a strong 
Google ranking because it is a 
consumer-based site, and it's 
important for the public to eas- 
ily view it. "You can have the 
best site in the world, but if 
people can't find it, it doesn't 
make a difference." 

When talking about 
Google's influence over the 
thinking of developers, Thomas 
said, "Google is a powerhouse, 
and when Google speaks, 
developers listen because it's 
the most popular search engine 
out there. They have a huge 
influence on a lot of the ways 
things are going. They make a 
lot of their tools useful, like the 
Google Webmaster tool that 
helps you track your search 
engine optimization standing 
and things like that. There are a 
lot of tools that they make 
available that will definitely be 
helpful to Web teams around 
the world. "I 
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GT Software Whips Up a Batch of SOA 



BY DAVID WORTHINGTON 

Mainframe batch processing is 
not going to fade away anytime 
soon, as evidenced by software 
such as GT Software's Ivory 
Service Architect 3.3, a solution 



that couples batch systems with 
CICS, IMS and Web services. 

Ivory Service Architect 3.3, 
released in mid-April, is a tool 
set that enables mainframe 
applications to consume Web 



services, and conversely, en- 
ables Web services to be assem- 
bled from mainframe assets. 
Services built from combina- 
tions of CICS (Customer Infor- 
mation Control System), IMS 



(Information Management Sys- 
tem), mainframe data and Web 
services are executed by Ser- 
vice Architect's new Ivory Serv- 
er for Batch component. 

Other improvements include 



FarPHint 





BizTalk 

A Codeless Solution 



Connected Systems Solutions 



Parse your Microsoft Exeet XLS data into KM L for easy 
processing in your BizTalk Server 2006 business 
process orchestration 



Unlock your WicroraEl Extrf® JfirtnrJslieBJ dola for use ill yc-ur 
business $ rocess wilti Fnifolnl Spread fnr BizTolk. The FerPoinl 
Spreadslieei Scheme Wizard! irie#rrfled info Visual SlurJlo 2005 
pravid-as a codeloss rtpprooch In scaring the sdhema ihof 
deism ine; I he nuppiitj of ihe resulting M messages. 
FncPoEnt Sorcpil far Bizlalfc mnkos it cosy to rjene-rnrq a schemn. 

The FnrPoEitf Spreadsheet Tehama Wizard loads □ source Excel 
{XLS) tilt s: a temphle and Ms you specify ttie do?o ponion 
oFtndi sJieri separate from ihe header and trailer. Tfou con 
diwsg which columns cue record alomsnrs on-d which or* retard: 
alltiaules in the generated nulput, end you can chose the XML 
dam type for gacH »tif mn. 



Integrates MlrroMifl Fjcfll data $*qmlstfly urn your 
B«Talkflpflliprtifln-5 

Provides a todclsss »li>Hon from custam sdieniii 
:i::::iiii- through siraaiin :-nr n : 

Autorwleslhe parsing oi XLS message stoMinslnrg 
XML message steams 

Preserves 3CLS dcEla ihrairgh disasLemfaler far 

carnpleie suiomnlipii 



^T -"■ ■' "' hrl*iiil 



c= 



3D 



C|jl i..:f.iJlLi 



csai_^ i«Htoi 




■visual Studio 



* Also randies CSV £ nrhnddimired 
Hsr files 

■ You specify ihe XML schema to 
mail rhd- disassanblnd XL5 doio 

■ TbeXWhcheniaiscrcnied using 

Ik-UiaOJ nUiflratofi Scl HIM 
Wizard 

' Mulliplc sthmnai tm\ ha sd fot 
parsing mripm XLS forrnqti 




FarPoinl Spread for 
HhTitlk can aHtonwtfctttly 
dixasi.emhte t£xceI{XIJl) 
files in your BizTalk prvctss. 



"Tfli.i h ime of the jtfjjfij ffKHt ittipftrtanl pud tottg-awwreti 
tnriiHiTiktns ro the business ptvvess Integration (8P1) 
market I've ever seen.'' 

- Jeff Lynch 
Indttsfry Expert and Mkr&ittfi MVP 



FarPoint 

Enterprise Spreadsheet Solutions 
www Far Po i ntS pre ad , com 



Nnrlh American Office 
Phon*; MMfottl 

ft)C wittwm 

5n5es@fBTpflinrSpreDd.ram 



European Office 

Teiaphnne: -H ^J 1 ?9B 91 7 IT? 

FwHM«]179Blll3IW 
SQlesfiiraa>{r@FnrE l oin:lSpcoD£[am 






(0 2DW-HQ7 FuirWr TiiaiKl^m Im U Mjifi itunuL Thit I rim Sin, H i\£\M ha ihinp *lttaa nttUs. Muiuulr, IbUk. Vhucl Studm. uhl 1b Vhuri SJuAd bji> at* ralim 

W iqjnlP'nl Mimqii^f Mhrtiif I f irpjiriim Drhar WnUrortu mu *r [«njirl| r lirir ri'^rci™ inn 



■ 



a broadened XML implementa- 
tion and new support for con- 
versational IMS applications and 
XML Schema Definition. 

Gartner analyst Dale Vec- 
chio believes that batch pro- 
cessing is the last bastion of 
legacy modernization. "[Ivory 
Service Architect] has to be 
used as part of a broader main- 
frame modernization approach. 
You can't ignore one of the 
largest workloads out there, and 
that is batch." 

Vecchio continued, "Inte- 
gration has risk and expense. 
This [combined batch and SOA 
approach] is not only a reason- 
able way to do it, but also the 
only way to do it." Vecchio 
cautioned that Ivory Service 
Architect must perform well, 
because batch processes char- 
acteristically finish within a 
specified time period. I 

Sax's CommStudio 
Spring 2007 
Release Is Sprung 

BY DAVID WORTHINGTON 

The Spring 2007 release of Sax 
Software's CommStudio suite 
of components for Visual Stu- 
dio 2005 became available for 
download on March 31. 

CommStudio is an assort- 
ment of communication tools 
and components for COM and 
the Microsoft .NET Frame- 
work that extend Visual Studio 
2005 beyond the desktop, con- 
necting applications to devices 
such as scales, sensors and 
handheld devices. 

"CommStudio is all about 
connecting the old with the 
new," Mike Sax, president and 
founder of Sax.net, explained in 
an e-mail. "Now it's easy to build 
a Web service front end to exist- 
ing computer systems, giving 
them a new life and tighter inte- 
gration with your new .NET 
applications," he added. 

Its .NET libraries and 
ActiveX controls now support 
both 32- and 64-bit installations 
of Window Vista. The release 
ships with native .NET Frame- 
work 2.0 assemblies and Visual 
Studio code samples. AH of the 
.NET and other core compo- 
nents exist within a single DLL 
file, smaller than 250KB. 

New barcode components in 
CommStudio generate both lin- 
ear and two-dimensional bar- 
codes. The barcode components 
can be printed directly to paper, 
or exported to a Web browser to 
be printed later, noted Sax. I 
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Logidex 5.5: Governance for Life 



BY DAVID WORTHINGTON 

LogicLibrary has taken Logidex 
beyond the confines of design- 
time and production SOA gov- 
ernance, to provide governance 
and share metadata along the 
entirety of the SOA life cycle. 
The Logidex 5.5 update became 
generally available in early May. 

Logidex checks for policy 
conformance and validation 
issues during the design phase, 
before services are published. 
Validation capabilities have 
been expanded from version 
5.0, with integrated XPath- 
based policy assertion support, 
and sample policies that vali- 
date WS-I Basic Profile man- 
dates, said Alan Hinder, Logic- 
Library's CEO. 

Logidex's Smart Controls 
pass the review activity to users 
according to their role when 
human involvement is needed, 
said LogicLibrary CTO and co- 
founder Brent Carlson. When a 
service clears validation and is 
identified as a candidate for pro- 
duction, Smart Controls auto- 
mate the transfer of governance 
responsibilities from role to role, 
and keep a documented audit 
trail, Carlson explained. 

Smart Controls can now be 
customized to meet corporate 
compliance mandates. Logidex 
5.5 allows users to define their 

Red Hat Firms 
Up SOA Stack 

■* continued from page 1 

world with a complete open 
source stack in a way that 
remains pretty true to open 
source principles. Novell has 
really shied away from doing any 
significant open source stacks. 
Bight now Bed Hat is turning 
out to be the pure play for top- 
to-bottom open source stacks." 

WHAT'S THE (SOA) STORY? 

But Jason Bloomberg, senior 
analyst at ZapThink, thinks that 
Bed Hat still has some building 
to do. "I would say there are oth- 
er open source plays out there. 
There's open source ESBs, and 
Iona bought LogicBlaze, but it's 
not really about competing with 
those guys," he said. "It's about 
competing with commercial 
plays. It is a value-add. The key 
question is, how compelling it is? 
Bed Hat's overall challenge is 
that they don't really have an 
overall SOA story." I 



own checklist-type fields, creat- 
ing site-specific governance 
policies, Carlson noted. 

A new impact analysis tool 
sniffs out orchestration, schema 
and service dependencies, parses 
Business Process Execution 



Language, WSDL and XML 
Schema Definition, then dis- 
plays results using Logidex's 
Asset Belationship Management 
Visualization, said Himler. 

When services are ready for 
consumption, Logidex can 



automatically integrate with 
IBM's WebSphere Service Beg- 
istry and Bepositoiy to synchro- 
nize design-time governance 
and state management efforts, 
said Himler. Integration with 
HP Systinet was also expected 



to be available in May. 

"Customers have realized 
that developing and deploying 
[SOA] is not a sequential 
process, but an iterative and 
fluid exercise. [They] require 
solutions that align with this 
reality," said Daryl C. Plummer, 
Gartner fellow and managing 
vice president. I 
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Silverlight to Target Microsoft Developers 



-4 continued from page 1 

verlight is cross-platform: It is 
available for Macintosh as well 
as Windows and is compatible 
with Firefox and Safari as well 
as Internet Explorer. No Linux 
support has been announced, 
but other platforms are being 
evaluated, said Keith Smith, a 
group product manager in the 
development division at 
Microsoft. 

At least one Linux distributor, 
Ubuntu, would love the oppor- 
tunity to port the Silverlight 
runtime to Linux. According to 
Ubuntu spokesman Joseph 
Eckert, "Microsoft has stated 
diat Silverlight is a cross-plat- 
form plug-in. 'Cross-platform' 
does not mean 'two-platform,' 
and if the Microsoft team needs 
help getting this to work on 
Ubuntu, we would be delighted 
to help them accelerate that. If 
it's open source — who knows? 
There might finally be some 
Microsoft code in a Linux dis- 
tribution." 

Microsoft's Smith noted that 
Silverlight applications could 
be hosted on any server tech- 
nology to reach the broader 
Web community. Any Web 
application server can serve up 
Silverlight content, said a 
spokesperson. Microsoft is like- 
wise looking into supporting 
other browsers and devices. 

'ADOBE KILLER' RUMORS 

Over the past year, the rumor 
mill has whispered that 
Microsoft was readying an 
"Adobe killer." Smith denied 
that Microsoft is targeting 
Adobe. Indeed, Smith said that 
Flash and Silverlight work well 
side-by-side in a browser, "This 
is not a rip-and-replace propo- 
sition." Smith acknowledged 
the inevitability of a third-party 
translation tool. 

NPG Group analyst Chris 
Swenson demurred, saying, "Yes, 
[Adobe and Microsoft] will be 
competing, but they do have an 
argument that, in some respects, 
diey are not competing. Adobe is 
not targeting the Visual Studio 
users now; they are leaving that 
to Microsoft. Microsoft has mil- 
lions of Visual Studio developers 
in its camp, and they are looking 
for an easier way to collaborate 
with designers. It is a more 
nuanced story." 

Swenson continued, "Adobe 
is a leading solution provider in 
this space, after acquiring 



Macromedia, and has a best-of- 
breed suite. Microsoft has been 
smart about how they have 
done it by focusing on areas 
Adobe has not focused on, and 
they are using their strengths 
also. It's unrealistic to take on 
Adobe." 

To that end, Silverlight is tar- 
geting Visual Studio developers 
to provide the marketplace with 
new experiences using stan- 
dards-based Web techniques, 
Smith said. Smith expects that 
its partners will build an 
"ecosystem" around Silverlight 
by adding new components like 
many already did with 
ASP.NET and Windows Forms. 

Adobe vice president of 
marketing Jeff Whatcott said 
Microsoft's approach to rich 



Internet applications isn't holis- 
tic. "They're doing what they 
need to have a story in the mar- 
ketplace. They're driving peo- 
ple to Windows." 

An add-in for Visual Studio 
"Orcas" Beta 1 released at 
Microsoft's MIX07 earlier this 
month, delivered support for 
Silverlight. 

By contrast, Adobe has des- 
ignated Eclipse as its platform 
of choice. Flex 2.0 is the com- 
pany's Eclipse-based IDE for 
building rich Internet applica- 
tions on its Flash platform, and 
uses the proprietary MXML 
markup language and Action- 
Script. 

Although XAML and MXML 
are both XML-based user inter- 
face markup languages, they are 



not designed to work together. 
ActionScript is an ECMAScript- 
derived programming language, 
used by developers to describe 
logic and event handling within 
applications developed in Flash 
and Flex. 

Dave Gruber, Adobe's group 
product marketing manager for 
Flex, said diat it was conceivable 
that a third party could over- 
come core differences and trans- 
late from XAML to MXML. 

Gruber would not comment 
on Silverlight, saying only that 
Adobe was looking into it. 

CART BEFORE THE HORSE? 

Microsoft is gradually rolling 
out its new platform. Even 
before Visual Studio fully sup- 
ports Silverlight, Redmond is 



SILVERLIGHT SHINES AT MIX07 



Silverlight is now a full-fledged .NET platform 
member. Its latest runtimes and a complementary 
lineup of design and development tools became 
available at MIX07 in Las Vegas, where Microsoft's 
chief software architect Ray Ozzie kicked off the 
conference with his April 30 keynote. 

Both the Silverlight 1.1 beta runtime and a 
.NET-enabled version, 1.1 alpha, were launched at 
MIX07. The .NET Framework contributes ASP.NET 
AJAX, cross-platform language and debugging 
support, IntelliSense enabled client/server code, 



LINO (Language Integrated Query) and WPF con- 
trols to Silverlight. 

The Dynamic Language Runtime for .NET also 
rolled out at MIX07. Silverlight works with C#, 
JavaScript, Python, Ruby and Visual Basic. 
Microsoft also unveiled a Silverlight plug-in for 
Visual Studio "Orcas" Beta 1, and the final ver- 
sion of Expression Studio. 

Silverlight version 1.0 will be released this sum- 
mer, with an update for the Expression Studio. 

— David Worthington 



emphasizing its usefulness to 
digital media content owners 
and creators. Expression 
Designer converts Windows 
Media Video into Silverlight 
applications, removing the play- 
back requirement for Windows 
Media Player. 

Additionally, Windows Media 
Services and IIS 7 in Windows 
Server "Longhorn" will provide 
a media pack to give organiza- 
tions more control over how 
media assets are utilized, said 
Smith. "We will get ubiquity by 
having content and experiences 
that are not on other plat- 
forms." Microsoft has stated 
publicly that Longhorn Server 
will be released in the second 
half of 2007. 

In the absence of Silverlight 
tooling, developers can build 
Silverlight applications using a 
text editor such as XamlPad, 
because it is JavaScript- and 
XML-based. 

When asked whether Micro- 
soft was putting the cart before 
the horse by releasing Sil- 
verlight before there are tools to 
fully exploit it, Smith explained, 
"We have to crawl before we 
can run, and to have the plat- 
form right. We need a stable 
foundation before the tools 
experience can catch up." I 



A Wait Until '08 for VS Orcas? 



■* continued from page 1 

Web site in late March. It 
detailed the team's release 
schedule for the remainder of 
the year, covering Visual Studio, 
Visual Studio Team System and 
Power Tools. The team had con- 
firmed that Orcas was still on 
track for 2007. 

ROSARIO SLIPS TOO 

Any delay in Orcas will affect 
Rosario, the next major release 
of Visual Studio Team System, 
because they are being devel- 
oped in parallel. Somasegar 
acknowledged diat Rosario will 
not ship in 2007 and could arrive 
as many as nine to 12 months 
subsequent to Orcas' general 
availability. 

Orcas will be Microsoft's 
preferred IDE for building 
Windows Vista and Office 2007 
"ribbon"-styled applications. 
Microsoft is also touting its 
Web development capabilities: 
Orcas is swimming with 
enhanced HTML, CSS design- 



er and JavaScript support, and 
adds integrated AJAX support. 

Other highlights include 
SharePoint extensions, the 
Expression design tools' 
WYSIWYG designer, and an 
updated version of the .NET 
3.0 Framework. Orcas will 
expand data query and manip- 
ulation capabilities with Lan- 
guage Integrated Query and 
can target multiple versions of 
the .NET Framework, from 
2.0 and above. 

Somasegar guaranteed back- 
ward multitargeting for the pre- 
sent, but would not promise it 
beyond the Orcas edition of 
.NET "We cannot plan future 
editions of .NET around 
Orcas," he said. 

Rosario's key improvements 
will be in the realm of project 
management. It will provide 
change management, source 
control, test creation and 
automation, and remote access 
to projects. Rosario will flesh 
out Microsoft's Dynamic Sys- 



tems initiative, lassoing together 
project management, develop- 
ment and operations manage- 
ment with Simple Markup Lan- 
guage, said Somasegar. 

Laura DiDio, an analyst 
with the Yankee Group, 
weighed in that any delay 
would impact Microsoft's 
Dynamic Systems Initiative the 
most, noting that the initiative 
was already delayed once 
before. "Microsoft does leave 
the door wide open for com- 
petitors to jump in and for com- 
ponents vendors to change 
their strategy and port to Linux 
or open source. It's hard to lose 
that type of momentum. Obvi- 
ously any delay would affect 
Microsoft's leading-edge cus- 
tomers the most." 

Jonathan Cohen, vice presi- 
dent of product marketing and 
management at Infragistics, a 
.NET component vendor, 
remarked that any slippage in 
Orcas' ship date would not 
"mess up our plans," and that 



Infragistics' product road map 
is tied very closely to 
Microsoft's. "When they are 
ready to release, we will be 
ready to release. Nothing is set 
in stone." 

According to Prashant Srid- 
haran, group product manager 
in the Microsoft developer divi- 
sion, a community technology 
preview of Rosario will be made 
available close to when Orcas 
ships, but the feature set is not 
yet finalized: "We are still 
determining its genetic make- 
up," said Sridharan. 

There are no official code 
names for Visual Studio 
releases beyond Orcas. Al- 
though the "Hawaii" handle 
has made the rounds, it is only 
Microsoft parlance for a col- 
lection of tools under develop- 
ment, said Sridharan. Future 
editions of Visual Studio will 
target nonprogrammers, and 
provide a consistent program- 
ming model across its spec- 
trum of users. I 
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Introducing Time-lapse View, 

a productivity feature of Perforce SCM. 
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evalulian at a file, thpngB by chpn-Oj*, in on* fluid dfipipy. CoW grtdal^ft! 
mark ihe aging of lite contents, avid ihe dis-play's timeline tan be configured 
to show changes by revision number, date, or changc-sel number. 

Tiinfl'-lwpS'O Vww h jwsl on? of ttw many produclivity tools that rome wvitti Ihw 
Perforce SCW System. 



Perforce 

SOFTWARE 



Download a free copy of Perforce, no questions 
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available throughout your evaluation. 
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Intel Shows Off New SoCs in Beijing 

First Chinese developer forum focuses on 45nm tech, new chip designs 



BY P.J. CONNOLLY 

Last month's Intel Developer Forum in 
Beijing — the first held in the Chinese cap- 
ital — showcased the company's new 45nm 
processor technology, but the company's 
system-on-a-chip (SoC) designs for now 
and tire future were solidly on the agenda. 
On the first day of the show, Intel dis- 
played a new SoC media processor, 
aimed at the set-top box and networked 
media player markets, and accessible 
through a modular development envi- 



ronment. The CE 2110 media processor 
includes a 1GHz XScale processing core, 
graphics and A/V processing, as well as 
I/O components, in a single chip. A num- 
ber of consumer electronics manufactur- 
ers either are shipping devices available 
with the new processor, or have indicat- 
ed plans to use it in future products. 

Intel senior vice president and digital 
home group general manager Eric Kim 
also announced plans for a line of SoC 
designs optimized for the consumer elec- 



tronics space, and aimed at delivering 
what the company called "greater perfor- 
mance, full Internet compatibility, and a 
more cohesive software ecosystem." 

Intel senior vice president and digital 
enterprise group general manager Tom 
Gelsinger announced plans for the 
"Tolapai" family of SoC designs, aimed 
at reducing the power consumption of 
servers by 20 percent when compared 
with the standard four-chip design, with- 
out compromising efficiency or perfor- 



Australian Startup Ships Microkernel 

Virtualization touted as solution to licensing issues 



BY P.J. CONNOLLY 

The next thing in embedded microker- 
nels has emerged from Down Under: 
Open Kernel Labs has announced the 
release of its OKL4 variant of the L4 
microkernel, for use in embedded real- 
time applications. 

OKL4 is available under a BSD open 
source license, and runs on ABM v4/v5 
and x86 processors. ABM v6 and MIPS 
processors will be supported this fall. 
OKL4 can host a number of BTOSes as 
guests, including eCos. It also works 
with Wombat, a Linux port engineered 
for the L4 microkernel. 

The OKL4 microkernel includes vir- 
tualization technology that runs guest 
operating systems in user mode; the 
microkernel is the only code executing 
in privileged mode. A native program- 
ming environment allows developers to 
create subsystems without requiring an 
operating system, while the trusted com- 
puting base allows security-critical sub- 
systems to function with fewer than 
20,000 lines of code. 

Open Kernel Labs CEO Steve Subar 
believes that the company's "pure micro- 
kernel approach" solves the problem 
that arises when open source and pro- 
prietary code are deployed on the same 
handset. "We didn't start off in life with 
the idea that what the world needed was 



another virtualization technology, but it 
turned out that in the mobile space, 
that's a current requirement for most 
vendors, and a microkernel is a really 
good solution to doing that." 

OKL4 also incorporates protection 
domains that allow applications, drivers, 
libraries and other systems services to be 
walled off from one another, with the 
intent of ensuring system stability. Com- 
munication between subsystems takes 
place in a high-bandwidth, low-latency 
architecture, which allows the use of 
hardware-enforced interfaces with light- 
weight components. Qualcomm adopted 
the platform in an early state in Septem- 
ber 2005, as a foundation technology for 
its Mobile Station Modem chip sets. 
Ericsson has also used OKL4, as a 
research platform for operating system 
implementation. 

The company is a spin-off of NICTA 
(National ICT Australia), a research 
institute and technology incubator fund- 
ed by the Australian government, with 
support from educational, state and ter- 
ritorial institutions. Concurrently with 
the OKL4 release, Open Kernel Labs 
announced the establishment of its 
worldwide headquarters in Chicago. 
Besearch and development will remain 
in Australia, although other functions, 
including field engineering, will be 



based in the United States. 

At the same time the company 
announced a development, marketing 
and research alliance with Fluffy Spider 
Technologies, a developer of user inter- 
face technology for embedded devices. 
Fluffy Spider is the creator of the 
FancyPants embedded GUI platform. 
The new alliance continues an agree- 
ment between FluffySpider and the 
NICTA incubator. I 



mance. The new SoCs for servers are 
due in 2008. 

The conference also featured the 
company's newest embedded proces- 
sors, a quad-core Xeon design dubbed 
the 5300 series, launched earlier in April 
at the Embedded Systems Conference 
in San Jose. The San Jose launch had 
featured the unveiling of a custom-built 
Orange County Chopper, built around 
embedded technology from Intel that 
included entertainment and navigation 
systems, as well as a digital dashboard 
with virtual rear- view mirrors. The bike 
apparently did not travel to China. 

CTO and corporate technology group 
director Justin Battner discussed the 
company's plans to reduce the power 
consumption of its processor lines by 90 
percent by the end of the decade, and 
ongoing research with the 80-core Tera- 
flops chip and a companion stacked 
memory solution. He later demonstrat- 
ed the chip, at a speed of 2 teraflops. 

Also of note, on the second day of the 
conference, Intel senior fellow Mark 
Bohr confirmed that the company has 
working versions of the "Silverthorne" 
45nm processor aimed at mobile Inter- 
net devices and ultra-mobile PCs. I 
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J^ s if it were an octopus, the 
^^L enterprise database manage- 
^Lg^k ment system has evolved the 
V W ability to embrace a variety 
of data and technologies, as customers 
and vendors alike recognize the impor- 
tance of the DBMS to the corporate 
ecosystem. But its no swim in the gar- 
den for either party. 

The complications facing enterprise 
database management systems are not 
trivial. The amount of data that end users 
maintain is growing from a variety of pres- 
sures. In general, businesses are keeping 
richer forms of data, in the 
form of audio, images and 
video. New data formats, 
and structured XML in 
particular, are entering the 
scene. Behind everything 
else are the pressures from 
a new scrutiny of how 
businesses maintain the 
data upon which they live. 
Governance concerns that 
require companies to re- 
tain e-mail and other com- 
munications in an accessi- 
ble format are increasing 
the burden on database 
systems and their man- 
agers, and things are likely 
to get worse before they get better. 

Other technologies are further mud- 
dying the waters: Increasingly, data is 
mobile, in the form of intelligent devices 
that are only occasionally connected to a 
network. Virtualization of 
both data and systems is 
being implemented, or 





If a document has no value, 
'get rid of it,' says Gartner's 
Feinberg. Don't store it. 




at least talked about, even if 

the realities fall short of the ambitions. 

Gartner Distinguished Analyst and 
vice president Donald Feinberg, a 41- 
year veteran of the IT industry and former 
director of mainframe product marketing 
at Oracle who has covered data manage- 
ment for Gartner for 17 years, told SD 
Times that issues of governance, mobility, 
scalability and stability are driving the 
evolution of the enterprise DBMS. 

Scalability is perhaps the most obvious 
problem facing DBMS customers and 
vendors. "There are two issues around 
scaling," said Feinberg. 
"There's the size of the 
database, which needs to be 
scalable to hundreds of ter- 
abytes, because a lot of this 
stuff takes up a lot of space. 
Take a medical history file 
[as an example]. You start 
storing EEGs and EKGs, 
and X-rays into a patient 
information database, [and] 
it's going to take up ter- 
abytes of data. The second 
thing is, that [die DBMS] 
needs to give you the prop- 
er facilities to manage data- 
bases of those sizes." 

Feinberg pointed out 
that some of the problem is simply man- 
aging the hardware: "When you start to 
get over a few, 10, 15 terabytes, it 
becomes a nightmare for the storage 
people, [some of whom have] to manage 
storage farms that are a hundred ter- 
abytes. I talked to one guy the other day 
that had 4,000 LUNs [virtual disk vol- 



umes], because of the sug- 
gested logical size of die unit 
within this thing they were supposed to 
do, and he had to manage [these] out- 
side of the DBMS. It's a nightmare." 

The vendors, Feinberg believes, 
understand the stakes. "What they're 
doing, is trying to make the databases 
you create with their DBMSes scalable 
to whatever size you need, manageable 
easily." 

Of course, one can't dump data into a 
warehouse forever, Feinberg noted. "The 
next step, of course, is: When do we take 
data out of these operational systems? 
Whether they are OLTP [online transac- 
tion processing] systems, or whether they 
are operational data warehouses, they 
can't just keep growing forever. We have 
to be able to retire data on an appropriate 
basis out of an OLTP [system] into a data 
warehouse, and from a data warehouse 
into some kind of archive," whether it be 
online, near-line or offline. 

"One way or another," Feinberg con- 
tinued, "we have to be able to reduce the 
sizes of these operational systems, and I 
do use the word operational to include 
data warehouses, because drey are." 

EMBRACING NEW FORMATS 

Feinberg also believes the major ven- 
dors are successfully addressing the oth- 
er major challenge: the explosion in rich 
data. "They're architecting into the data- 
base the capability to store many differ- 
ent types of data, efficiently." Perhaps 
the most useful development in DBMS 
data formats to Feinberg has been the 
adoption of native XML storage. 



"XML is probably more structured 
than relational [data], if you really want 
to get down to it," he argued. "XQuery 
can run very quickly and efficiently 
against it; it means that you can search it 
as part of the database, but you can also 
take the XML document out in whole, 
without having to store it twice [as with 
other data]. [Otherwise,] you stripped it, 
stuffed it into [a relational database] and 
then kept a copy in a BLOB [binary 
large object file] so that you could see 
what it looked like as a document. Now, 
they're storing it natively, so you can 
effectively do both" in the same step. 

He continued, "You can store a lot 
of. ..rich media types, things like JPEG 
and photographs and music and voice- 
mail, that being the one that's the real 
killer [app] out there. I think the audi- 
tors are going to start insisting that peo- 
ple start keeping voicemail, recorded, 
and forever, as they always do. That's 
going to create another issue. Those are 
types of data [where], although they 
have [a great deal of] structure to a pro- 
gram like Photoshop, they have zero 
structure to a program like Oracle." 

Governance concerns and record 
retention requirements are also driving 
the need for efficient, scalable storage, 
according to Feinberg. "Eventually for 
corporations, they're going to want to 
[retain] all of their information, for sever- 
al reasons. Anything in a corporation 
that's worth keeping means that we need 
continued on pi 
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■* continued from page 31 

to have security and governance 
around it, automatically." 

There should be no such 
thing as "worthless data," Fein- 
berg pointed out. "If you're 
going to sit there and tell me 



that the document you re going 
to put into the data warehouse 
has no value, then my question 
to you is: 'Why are you keeping 
the piece of paper in the first 
place, let alone putting it onto a 
disk?' Get rid of it." 



Feinberg discussed the use- 
fulness of parking code inside a 
database, in the form of stored 
procedures, scripts and so forth. 

He noted, "We go through 
a period of five, 10 years 
where everybody wants to do 



that, then we go through 
period of five or 10 years 
where people say, 'If it's for an 
internal application, I'm prob- 
ably OK, but if it's to sell, then 
I'm really not OK, because I 
[will] need to rewrite my 
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stored procedures, m every- 
body's different stored proce- 
dure language.' So, for 
instance, you won't find SAP 
using stored procedures, 
because they can't easily sup- 
port multiple database engines 
if they have to recode every- 
thing in T-SQL and PL/SQL 
and IBM SQL, etc. With Java, 
my understanding is that you 
move the logic out of the data- 
base and into the programs 
again. We're back to more of 
what you would call a fat 
client," with that model. 

Feinberg continued, "There 
probably are some things that 
should be stored in the data- 
base, that help with referential 
integrity by storing it there. If a 
piece of code is always going to 
go with this one piece of data, 
and that gives us some type of 
referential integrity of the data, 
then maybe you want to do 
that, even if it means [software 
vendors are] writing four ver- 
sions of it. There are many oth- 
ers that you want to keep in the 
programs, because the more 
you raise up to the middleware 
or the programming level, the 
more flexible and portable the 
application becomes. That's an 
age-old argument, and it's not 
an easy answer, because it real- 
ly depends on the architecture 
of the application." 

LOOKING AHEAD 

Feinberg believes that ultimate- 
ly, many OLTP databases will 
give way to a model where most 
if not all of the data is ware- 
housed. "If you want to look at 
the architecture of the future, 
bring in the operational data 
warehouse. They are beginning 
to be used to store operational 
data as well as the traditional 
[uses]. This is very important 
when it comes to designing the 
database structure, when it 
comes to the DBMS vendor, and 
the tuning, and the other things 
they have to do architecturally to 
support this." 

He added, "The architecture 
of applications is going to be 
[such] that they're going to get 
some of their operational data 
out of die OLTP or die transac- 
tion databases, but some of it is 
going to come out of the data 
warehouse. And as more and 
more of that happens, as you get 
BI and analytic code in OLTP 
applications that access data 
warehouses, the warehouse be- 
comes much more critical." 



www.sdtimes.com 



Software Development Times . May 15, 2007 . 



SPECIAL REPORT 



33 



Challenges 

Mobile applications and radio-fre- 
quency identification (RFID) are going 
to add dramatically to the amount of 
data companies are processing, Fein- 
berg believes, and that means putting 
data straight into the warehouse where 
it can be used most efficiently. 

Using a supermarket as a model, "all 
the historical data that we need is put 
into the data warehouse. When RFID 
starts working for real, and becomes 
cheap like it's supposed to, and every 
single item on a supermarket shelf has 
an RFID chip on it," that will solve the 
problem oi inventories that are never 
quite up-to-date, he claimed. 

Feinberg explained, "Ten minutes 
after they take the inventory, or less, [it's 
out of date. But with RFID,] I can push 
a button and get an accurate inventory 
of every item on the shelf that I want to 
order right now, because it's actually 
reading the RFID chip in every store 
across the world, and sending [data] 
back to me, I know exactly how many I 
really have on the shelf. That's my inven- 
tory database. Now, where do I go to get 
the price to buy it? I go into the vendor's 
computer; I go into his data warehouse 
and pull out my pricing history. I create 
a purchase order and send it off to the 
vendor. The purchase order's history, so 
it goes into the data warehouse. I never 
used an operational database — unless 
you define an RFID chip as a database 
of one, which, in fact, is what it is." 

KEEPING IT REAL 

Hardware virtualization has a long way to 
go before Feinberg sees it being truly 
useful to the DBMS community. "I 
haven't had 10 conversations about virtu- 
alization," he said. "The 10 I've had have 
either been 'When do you think it will be 
ready for use in the run-of-the-mill-type 
DBMS infrastructure?' or it's been "What 
do I do to manage Oracle, because they 
won't let me use VMware?' and that's it." 

Feinberg believes that will change, 
but not for several years. "If I had to 
position a dot on a virtualization Magic 
Quadrant — a 'hype cycle' — it would be 
way up by the peak of 'Inflated Expecta- 
tions' if you're running DBMSes. I think 
we're way far away from having the right 
software to manage it, having the real 
cost savings. I just don't see a lot of peo- 
ple wanting to do it [today]." 

But VMware-style virtualization isn't 
the only game in town, he noted. "Ora- 
cle RAC [Real Application Clusters] is a 
different story. What Oracle's built is an 
enterprise grid. I'm also not talking 
about mainframes here. The IBM Sys- 
tem z is one of the best virtualizations in 
the world, and yes, people use that." 

One of the big architectural chal- 
lenges, Feinberg added, is that "all of 
these vendors are going to have to run 
their DBMSes on true virtualized 
servers, where they have some level of 



VENDORS EXAMINE THE CHALLENGES 



We asked the Big Four of database management systems to tell us what they saw as their immediate challenges, 
and here's what their spokespeople told us: 




IBM: Bernie Spang, data server strategy director 

On compression as a solution: "The 
things we saw with traditional com- 
pression were A) it didn't give you 
enough compression, and B) it tended 
to cause application performance 
problems. So we invested and came 
out with the innovation we refer to as 
'deep compression,' which gives you a 
greater compression ratio.. .some cus- 
tomers have seen up to 80 percent, 
while not having a perceptible perfor- 
mance impact." 

On mixing relational and XML data: "It's fun watching our ear- 
ly-adopter clients and partners take advantage of [these] capa- 
bilities. Folks have not been thinking in terms of the XML struc- 
ture and the evolution of the XML schema, and how you can 
leverage that for greater flexibility than you can in a relational 
structure. The whole thought of being able to do that with struc- 
tured data that's sitting next to, but not a part of, the relational 
structure is a mindset change." 

On the evolution of business intelligence: "The first [genera- 
tion was] the basic reporting. ..the second phase was charac- 
terized by the OLAP and business intelligence applications. 
[Now, clients say,] 'I want all of my participants in the system 
to have access to the information and the insight to be able to 
make intelligent, correct, timely decisions in the business 
process as part of the transaction.'" 

MICROSOFT: Frangois Ajenstat, 
product management director 

On scalability: "What we're seeing 
across the board is that customers are 
suffering from a data-explosion prob- 
lem. If you look at the amount of data 
created before the year 2000, that's a 
lot of data. But since then, we've cre- 
ated a lot more." 

On mobility: "Whatever kind of data 
you have, whether it's a document, it's 
a highly structured piece of informa- 
tion such as a table, if it's an XML document or XML stream... how 
do you bring that information on your device, how do you bring 
that on your smartphone, or on your laptop that's not always con- 
nected to the main servers? When people start taking data 
offline, that creates a lot of tension from an IT standpoint." 
On developer support: "Developers [now] have native access 
to the database, and you start bridging the gap between devel- 
opment and database administration. That was a big theme of 
[SQL Server] 2005. You can query a database just like you 
would any Web service." 





ORACLE: Mark Townsend, senior product management 
director 

On data formats and compliance: 

"We're seeing people starting to store 
a lot of specialized datatypes — for 
example, GeoRaster images that the 
Defense Department and planning 
departments use. The trick is, that 
when you stick this stuff into the data- 
base, you actually want to take advan- 
tage of some of the value propositions 
that the database provides. So you 
wrap the security, and the availability 
and the performance and the scalability around that, so that you 
are actually getting all of the compliance capabilities." 
On reducing database queries through intelligence: "You can 
do in a single query what we call a cross-domain query, where 
you say, 'Find me my customers' addresses,' which is a relation- 
al lookup, where those customers have a shipping document 
that contains the phrase 'heavy lifting charges,' which is a text 
search, [and] where those customers are within five miles of this 
new store, which is a spatial search. [You can] do all of those 
three in a single query. So, you're not querying three different 
sources and then trying to munge the results together. The data- 
base itself is understanding and indexing and querying all those 
types, and it's the same optimizer that's doing that." 

SYBASE: Tom Traubitz, senior marketing director 

On scalability: "We see transaction 
volumes increasing in the range of 20 
to 25 percent a year, but [the] total 
data [amount] seems to be rising even 
faster. The fundamental problem is 
that you can't add 10 times as much 
data, and say that you need 10 times as 
many people to manage it." 
On how Sybase adapted: "We started 
by talking about how to change the 
algorithms...and that includes intelli- 
gent optimization, smarter things to 
do, when the partitions of data are connected by [network] 
wires versus the same ATA or SCSI bus. Now, we have more 
than a couple dozen different strategies for relating data algo- 
rithmically, whether the data's arranged as an array, or as a 
set of leaves in a data warehouse. You can do things that will 
find a very good path, not necessarily the optimal one. We've 
put of lot of research in that direction." 
On the challenges of governance: "A lot of schemes now 
require you to have live access to the data in exactly the state 
you reported it, for about seven years. You have to be able to 
reproduce that [for an audit]." 

—P.J. Connolly 




understanding of the maturity of the vir- 
tualization, so that they know when the 
bug is being caused by [the DBMS ven- 
dor] and when the bug is being caused 
by the virtualizer." 

A related issue is clustering, "because 
today, Oracle's the only one that does it 
well. Microsoft and Sybase and IBM are 
all working on that, because they have to 
get that working," he said. 

Data virtualization is a tougher prob- 
lem for Feinberg. "Two words scare me 
in this industry: One of them is 'virtual,' 
the other is 'emulation.' Anytime I hear 
either of those two words, I know perfor- 
mance is going to be sacrificed." But one 



can use a tool such as IBM's WebSphere 
Integrator, he noted, "to bring together 
data virtually into a SQL statement. It can 
go to relational sources, nonrelational 
sources, etc., [as] a virtualized query. The 
problem is, anytime you put the word vir- 
tual into something like that, it means 
there's going to be a performance degra- 
dation. There has to be: I'm mapping 
nonrelational data to relational data; I'm 
bringing data into a SQL query from 
God-knows -where . 

"The latest technology idea," Feinberg 
continued, "is that we combine something 
like Google into the virtual search for data 
in a data warehouse. That's coming. [Fed- 



eration] is valid, because a data warehouse 
query may need to get data from nonrela- 
tional structures, and if that's the case, a 
virtual query, a federated query, is the 
only way you can do it. Sybase has prod- 
ucts that [do] it, IBM has products that do 
it, [and] a number of companies are doing 
federated or virtualized data queries." 

In short, if the future won't exactly be 
one of monster data warehouses with ten- 
tacles reaching into mobile devices and 
RFID tags, and database administrators 
armed with the virtualization equivalent 
of spearguns, it nevertheless will have its 
own challenges. Fortunately, the DBMS 
vendors appear equal to the challenge. I 
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Battle of The 
Rich Internet Titans 

SD Times welcomes the aggressive release of Silverlight — Microsoft's 
cross-browser plug-in for delivering rich Internet applications. Some 
of you may know Silverlight by its uninspiring code name, WPF/E, Win- 
dows Presentation Foundation Everywhere. Some of you may not know 
Silverlight at all. That's going to change, and that's good news for every- 
one, whether you use Silverlight or not. 

The de facto standard for cross-platform multimedia content deliv- 
ery is Flash. That's not new. For a full decade, the Flash client — devel- 
oped by Macromedia, which was purchased by Adobe in late 2005 — 
has taken over the desktop and mobile world. Whether running in a 
browser or standalone, this proprietary client, with its rich animations, 
streaming movies, sounds and ActionScript and Flex scripting lan- 
guages, is used by 97.3 percent of desktop Internet users worldwide, 
according to Adobe. Flash is found in entertainment, in business 
applications, and everything in between. 

In the past decade, Flash's successes turned it into a 
monoculture... and despite its impressive functionality, nothing spurs 
innovation like competition. Is Adobe worried about Microsoft's Sil- 
verlight? You bet. Is Microsoft gunning for Adobe? Of course. Who is 
going to win? In the short term, Adobe is going to remain on top. Long 
term, it's harder to tell. That's a good thing. 

Adobe is building atop a decade's work, with a tremendous installed 
base and many loyal developers. It also had a decade's worth of content 
that future versions of Flash must support. Microsoft, on the other hand, 
has the advantage of working from a clean sheet of paper, with no devel- 
opers and no content. The folks in Redmond can look at what Macro- 
media and Adobe have developed with Flash, and do something innova- 
tive. Adobe has to fight to stay on top; Microsoft has nothing to lose. The 
battle should be exciting. 

However, Microsoft has its own Achilles' heel: Microsoft. To succeed, 
Silverlight must be truly platform-agnostic. Microsoft must resist the 
temptation to make Silverlight work "just a little bit better" on Windows 
Vista, Internet Explorer, Office and with other Microsoft products. That's 
not going to be easy, because it goes against the company's DNA and 
track record. If Microsoft succumbs, as we're worried that it will, Flash 
will remain the industry standard. 

Microsoft Floundering With Orcas 

Microsoft's confirmation of the latest delay in Visual Studio 
"Orcas" is disheartening. Although one can't expect a perfect 
synchronization of the Microsoft portfolio of development tools and 
operating systems, the ongoing delays in what is supposed to be the 
production-grade tooling for Windows Vista and Office 2007 are rea- 
son to be concerned. The notion that developers will have to make do 
with interim solutions for another year can't be encouraging them to 
embrace the new platforms, and the slipping schedule has to be dis- 
couraging business customers as much as the notorious hardware 
specifications seem to be. 

Microsoft's spokespeople keep telling us that the company is continu- 
ally looking to improve its development processes, but its track record 
with Longhorn Server, Orcas and Vista tells another story. 

If this current lineup is complete and shipping by the end of 2008, 
we'll be surprised. The company is so large that it can afford to fumble 
its business plans for years, but we have to say that it was a lot more fun 
to write about Microsoft when it was crushing everything in its path, 
instead of the case today, where it's a behemoth that seemingly can't walk 
and chew gum at the same time. Can't the software giant — and one of 
the largest purveyors of tools for software developers — ever ship any- 
thing on time? I 



SOAs Meet Mainframe Security 



Mainframes used to be primarily pro- 
tected by physical access. Termi- 
nals were hardwired to the mainframe, 
with the whole network housed within 
150 feet of the mainframe itself. A limit- 
ed user base had access to the main- 
frame, and the mainframe was tightly 
controlled by a knowledgeable young 
staff of IT professionals. There was a 
great deal of visibility into who 
was using the mainframe, as 
well as when and how, due pri- 
marily to these physical cir- 
cumstances. 

It, of course, helped that 
often the terminal rooms liter- 
ally sat behind large glass walls 
to allow managers to keep an 
eye on what was going on. This 
transparency extended beyond 
the windows of the glass 
house. COBOL is a very structured lan- 
guage, and easy to read, which makes 
creating malevolent programs difficult. 
It's hard to hide a Trojan horse, or even 
a virus without a fellow developer or 
manager noticing the code. A host of 
other factors lock down the mainframe 
even further: the OS's ability to isolate 
hardware and software so that software 
applications can't interfere with each 
other, networking protocols and hard- 
ware capabilities allow for complete sep- 
aration and portioning of mainframe 
resources, identification and validation 
of terminal and user access, and tools 
like RACF, Top Secret and ACF2. 

I talk with a lot of enterprise archi- 
tects who are actively pursuing SOA ini- 
tiatives and are exploring options for 
extending the mainframe into that envi- 
ronment. I am consistently surprised 
that the security of the data is taken for 
granted because it resides within the 
glass house. Perhaps this assumption 
shouldn't shock me, because for such a 
fragile-sounding construct, the glass 
house has been surprisingly effective at 
securing the mainframe. 

Within the protected environment of 
the glass house grew magnificent main- 
frame systems to run the world's largest 
banks, governments and most Fortune 
500 companies. However, outside of the 
house, the rest of the IT ecosystem was 
loosely defended by, at best, a chain-link 
fence. 

With the advent of the desktop com- 
puter, and client/server computing, all of 
a sudden there was a lightly defended 
computer sitting on the periphery of the 
IT world, highly accessible and ubiqui- 
tous. With relative ease, a program could 
be uploaded onto a floppy, and run loose 
across the LAN. Or worse, sensitive data 
from your mainframe assets could be 
downloaded, and walked out the door on 
that same floppy disk. 

As companies learned to overcome 
these relatively easy challenges, along 




came the Internet. The Internet opened 
wide the gates of the fence to all of the 
good, bad and ugly of the wild, wild 
West of the World Wide Web. 

Now, hackers and fraudsters didn't 
even need to worry about getting 
access to a floppy drive to wreak havoc 
with your IT assets. Attacks could 
stream in through the Internet directly, 
via security holes in Web 
servers, through e-mails 
and Trojan horses. The list 
goes on and on. 

All the while, the aging 
mainframe gurus would sit 
and grin at their desktop 
counterparts and feel confi- 
dent that the walls of the 
glass house were strong. 
However, there is a saying 
about people in glass houses, 
and a stone is on its way. 

NEXT STOP: YOUR SENSITIVE DATA 

Enter service-oriented architectures 
(SOAs). With the Web, came e-com- 
merce, self-service Web sites and the 
expectation that everything was available 
through a Web browser. But, with 70 
percent of corporate data residing on 
mainframes, the quandary becomes how 
to access this old protected asset 
through new technology. The solution 
was Web services, and all of a sudden, 
people were creating Web services to 
access, manipulate and display main- 
frame data and processes. 

These Web services had to be provi- 
sioned with credentials allowing users to 
gain access through the glass house and 
into the mainframe. And just like that, 
an exit off of the information superhigh- 
way is paved straight into the heart of 
your company's most sensitive data. 

Many feel quite comfortable with 
this, noting that the chain-link fences are 
now healthy, robust firewalls that scan 
all traffic for attacks. And, after all, this 
mainframe Web service is well back 
behind the firewalls that protect it from 
would-be intruders. 

However, fraudsters haven't forgot- 
ten "Superman II," where an ingenious 
employee strikes it rich defrauding his 
company from within. 

Insider fraud, ranging from isolated 
identity theft to corporate Enron-scale 
fraud, coupled with an outciy from the 
public on privacy issues, have prompted 
a flood of legislation, for example, 
Gramm-Leach-Bliley, Sarbanes-Oxley 
and HIPPA. Now, the risk isn't just from 
fraud, but has expanded to include the 
risks of noncompliance with a variety of 
legislation. 

The mainframe remains the bedrock 
of many IT shops. More than 70 percent 
of the world's data is on a mainframe. 
Legacy systems represent trillions of 
dollars in assets, and there are hundreds 
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of millions of lines of code still running 
on mainframes today. 

There is so much of the business 
process still locked in the mainframe 
that there are 40 million terminals in use 
today that allow business users access to 
mainframe applications through a trusty 
3270, 5250 or VT interface. However, 
most IT staffs don't even know who's 
using the mainframe, much less how 
they are using it. Tools like firewalls only 
serve to create a false sense of security 
for users. Developers looking to mod- 
ernize their mainframes through the uti- 
lization of SOAs are not ensuring securi- 
ty of the systems before rushing 
headlong into projects. 

SOA is a powerful concept allowing 
organizations to leverage their IT assets 
in flexible and creative ways, increase 
their agility and expose the hidden power 
of data and information previously locked 
within mainframe confines. And security 
concerns shouldn't prevent adoption of a 
SOA. Many mainframe-to-SOA migra- 
tions are completed in a haphazard fash- 
ion without a look toward how the appli- 
cations will be used and how to stay 
secure over the life of the program. 
Applications often house millions of lines 
of code that have evolved over years — 
perhaps including decades' worth of 
incremental change and enhancement. 
In the tried and true methodology of IT 
The business "screams" urgent, a project 
is initiated, business requirements are 
dutifully collected from a set of business 
users, and a program is born. 

Careful consideration must be paid 
to extend the security model of the 
mainframe into the service world to pro- 
tect organizations from internal and 
external fraud, as well as the ramifica- 
tions of regulatory noncompliance. I 

Stuart Burns is president and CTO of 
OpenConnect Systems, which sells 
mainframe integration and moderniza- 
tion tools. 



LETTERS TO THE EDITOR 

Silos Not Always Bad 



"Will SOA Become the New Siloed 
App?" Jennifer dejong was correct in 
her article [April 15, page 1] but missed 
the point suggested in the headline. Of 
course SOA will be siloed. The silos may 
be smaller, but they'll still exist. 

In traditional or SOA architectures, 
developing and testing a given software 
solution requires a certain amount of 
domain expertise. The larger and more 
complex the solution, the more this 
becomes important. That domain exper- 
tise is either brought into the develop- 
ment and testing process or is learned 
along the way. In either case, acquiring 
this domain knowledge is an expensive 
investment. And I propose that this 
knowledge is just as valuable, if not more 
so, than the actual solution. 

What's usually assumed is that devel- 
opers and testers are all "plug and 
play" — that you can move them around 
indiscriminately. They all use the same 
tools and know the same development 
languages and testing environments, so 
what's the problem? This ignores the 
importance of the domain knowledge, 
particularly in the senior team mem- 
bers. Languages, tools and environ- 
ments are easy to learn. Subject matter 
expertise is another matter. Would you 
swap the lead developer of a financial 
reporting application and the lead 
developer of the latest air traffic control 
application and expect either project to 
be successful? 

You may attempt to share knowledge 
by cross-training other members of the 
organization. Done properly, this can be 
successful and extremely useful. Done 
incorrectly it can destroy a product. A 
few hours of "knowledge transfer" ses- 
sions are seldom adequate. You can't 
transfer knowledge gained over the life of 



a product this way. By and large, it must 
be learned, and that process will be 
expensive and will take time. Shortcut the 
process and you end up with a staff that 
may be familiar with the application, but 
definitely not expert in it. Enhancements 
and maintenance will start taking longer 
and longer. Customer satisfaction (inter- 
nal or external) will decline. Then, things 
won't work at all, and we have to look for 
"the next big tiling" to fix the problems. 

Good teamwork and good teams take 
time to develop. You capitalize on this 
investment by sustaining and feeding 
the teams. By its nature, those teams are 
silos and it's not a bad thing. 

Charles Rush 

NOT OPEN ABOUT MOTIVES 

What now, is Adobe finally realizing that 
OpenLaszlo is an alternative? ["Adobe 
to Belease Flex as Open Source," SD 
Times News on Thursday, April 26] 

Sun and Oracle now give away tools to 
developers that used to cost tens of thou- 
sands of dollars thanks to Eclipse. Could 
IBM and BEA be far behind in letting us 
use their tools for free under GPL? 

As a systems analyst, I am very skep- 
tical about these companies' motives. 
Where is Sybase with a GPL version of 
PowerBuilder? 

David G. Olsen 

CORRECTION 

Vangard Voice Systems' name was incor- 
rect in the SD West show report in the 
April 15 issue. Vangard's Web site is at 
www.vangardvoice.com. 

Letters to SD Times should include the writer's name, 
company affiliation and contact information. Letters 
become the property of BZ Media and may be edited. 
Send to feedback@bzmedia.com. 



IDC Reports 250M Mobile Phones Shipped in 01 DATA WATCH 



i 



AUtimnrti iorrn? vendors wportoflced more growth ttian othtn In 01 2007, 
the overall ran kings remained steady frrtm ta-st year, 



IDC's Worldwide Quarterly Mobile Phone 
Tracker reported that in the first quarter 
of 2007, mobile phone vendors shipped 
more than a quarter of a billion units, an 
increase of 10 percent over the same 
period of 2006. That qrowth rate is only 
half of what the analyst firm reported for 
each quarter in 2006. 

IDC attributed some of the decline 
in growth to a slack market after the holi- 
day buying season, and some to the 
increasing maturity of the worldwide mar- 
ket, as carriers run out of new subscribers 
to enlist. 
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It's about time for your SOA and EA initiatives 



JUNE 11-15, 2007 • GAYLORD OPRYLAND RESORT & CONVENTION CENTER • NASHVILLE, TN 




Insight and analysis you'll use all year. 
All in one condensed week. 

In today's time-constrained environment, there is only one source for the tools you'll need to 
successfully leverage your upcoming SOA and EA initiatives. Join us at the Gartner 
Application Architecture, Development and Integration Summit and co-located Enterprise 
Architecture Summit. 

Save $695 when you register for both events! 

Gartner^ 

Application Architecture, 
Development & Integration 
Summit 2007 

June 11-13 
gartner.com/us/aadi-spring 

In 6 powerful tracks and over 60 sessions, the Summit will encompass today's key SOA and 
application infrastructure challenges, including: 

• SOA, Service Oriented Integration and Development 

• Application Management & Governance 

• AD Lifecycle: testing, quality, security etc. 

• Integration of Application, Information and Processes 

• Application modernization 

• Web Services and Web2.0 

• Programming methodologies & development environments 

• Application Project & Portfolio Management 

• Event Processing, EDA 

Gartnel^^ 

Enterprise Architecture 
Summit 2007 

June 13-15 
gartner.com/us/ea-spring 

Enterprise architecture is here, it's now, and its serious business. With mobility, flexibility, 
governance, compliance, collaboration, security, and business processes among the 
many factors playing more important roles in business, the spotlight is naturally turned on 
enterprise architecture to support these changing needs. Over the course of 27? days, we 
will provide you the keys to issues including: 

• What's the real value of EA and how to get business buy-in 

• What EA strategies, frameworks and methodologies work best and where 

• How to leverage SOA, BPM, and portfolio management in your EA 

• What tools are available to help develop and maintain your EA 



Save $200 by calling 
1-800-778-1997 and using 
Priority Code APNSDT 



BENEFITS OF ATTENDING 

Interact with a team of over 40 Gartner analysts and a 
host of distinguished guests will look at: 

• The future roadmap for Enterprise Architecture, SOA, 
application development and integration 

• Latest Best Practices and Case Studies 

• Evaluation of service providers and products 

• Organization, culture and people skills 

• "Big picture" strategies as well as practical 
recommendations 

Key features of the event: Analyst/User Roundtables, 
"How to" Workshops, networking opportunities and 
receptions and more! 



WHO SHOULD ATTEND 

• VPs and Directors of IT 

• Application, Technical, Business, IT, & Software 
Architects and Architecture Leaders 

• Application Infrastructure Executives 

• Strategy & Planning Heads 

• Integration & Development Leaders 

• Business Analysts 



Like to plan ahead? 

We are also presenting our Fall Edition of 

these two events December 3-7 at the 

Rio Hotel & Casino, Las Vegas, NV. 

Check gartner.com/events for details! 



Register today at gartner.com/us/soaea-spring 
or call 1 800 778 1997 



www.sdtimes.com 
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Why Words That Wound? 



Ameme circulating through tech 
blogs recently discusses the 
reaction of Kathy Sierra to a "death 
threat" against her posted on a rival 
blog. There were other entries about 
Sierra that were a mixture of sopho- 
moric aspirations and graphical sexual 
taunts. Sierra, for those who don't 
know her, is the author responsible for 
the "Head First" series of prize- 
winning tutorials published by O'Reilly 
Media. She writes a very interesting 
blog at headrush.typepad.com. In 
response to the "death threat," Sierra 
canceled a speaking engagement, post- 
ed at length about how worried she 
was, and threatened to stop blogging 
for a while. 

When I first came across this, I 
thought Sierra was being thin-skinned. 
The "death threat" was not really very 
credible and not terribly intimidating. 
Moreover, if you write for public con- 
sumption long enough, you're bound to 
receive some kind of threat. I received 
a death threat in the form of a voice- 
mail years ago and so have many other 
writers I know. It concerned me at the 
time, but it seemed so unlikely to be 
worth worrying abovit that I continued 
with all my usual activities. 

Eric Raymond, who has written lots 
of interesting books on computing 



history, has received death threats 
and has posted them on his blog 
(esr.ibiblio.org/?p=290). He too paid 
them no mind. And the writer of a 
scorching, extremely conservative blog 
wondered why the fuss over Sierra's 
situation when she received them all 
the time. 

In that question lies all the differ- 
ence in the world. Extreme 
political bloggers and Ray- 
mond are both agents provo- 
cateurs. They do plenty of 
baiting. And, while we might 
not like it, if you bash 
enough people over a long 
enough period, one of them 
is eventually going to threat- 
en you. Sierra, however, 
writes very little that's con- 
troversial. She typically 
investigates new effective ways of 
doing knowledge transfer, and similar 
topics. 

And so, Sierra was caught off guard 
by the seemingly virulent attack against 
her. This shows a certain unawareness 
of the rough-and-tumble style of the 
Web in which people post hideous 
remarks anonymously, cyber-bully oth- 
ers, and in the case of "happy slap- 
ping," actually bully people in real life 
for later consumption on the Web. This 



Integration Watch 




unawareness by Sierra is likely what 
made me feel she was overreacting. 

But, in fact, Sierra is right. Allowing 
the predation of polite participants by 
the unruly mob of anonymous posters 
destroys the public forum that blogs 
can be. If we allow bullies to dominate 
discussions and accept as inevitable 
their threatening and mocking behav- 
ior, then the opinions of 
folks not willing to accept 
this treatment will never be 
heard. And, frankly, I'd like 
to hear their voices. 

Tim O'Reilly (of O'Reilly 
Media) smartly suggests a 
code of conduct for blogs in 
which bloggers take respon- 
sibility for their blogs — 
including the moderation 
(that is, removal) of threat- 
ening and poisonous comments. (My 
interpretation of O'Reilly's proposal.) I 
like this idea, especially if it has a logo 
with it that indicates the blogger sub- 
scribes to the tenets of civility and 
responsibility that O'Reilly proposes. I 
want to go to blogs where thoughtful 
posts and comments are made, and 
where my time will not be lost in pars- 
ing aggressive, insulting and threaten- 
ing comments to find the few opinions 
that are worth reading. 



Sadly, O'Reilly's proposal has drawn 
condemnation from famous bloggers, 
who argue that it represents censor- 
ship. 

While we all know the Web tends to 
have a certain libertarian, "anything 
goes" attitude, to label voluntary com- 
pliance with a code of conduct as cen- 
sorship shows a remarkable confusion. 
Civilizations are distinguished by having 
progressed from the law of the jungle. 
We all agree within a given society to 
limit what we do and say, so that the 
quality of life of all is enhanced. For this 
reason, I don't say whatever comes into 
my mind and I don't walk around naked 
in public either. Neither of these con- 
straints, however, is censorship. Rather, 
the laws and the mores teach us to limit 
our behavior so as to enable society to 
move forward effectively. 

It is high time the civility that we try 
to express in our relations with others 
be brought to blogs, and if that means 
eliding intentionally hurtful comments, 
so be it. Sign me up and give me the 
logo. On my blog, I want comments 
that represent all points of view, but 
expressed civilly. Among the people I 
know and respect, not one of them 
would find this requirement to be a 
constraint or even an inconvenience. 
Nor should you. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works, Read his blog at 
binstock.blogspot.com. 



Once More, Into the Gears 



You shouldn't stick your hands into 
moving machinery. Yet sometimes 
it's necessary. My first salaried job was 
for a marine engineering firm that spe- 
cialized in advising how ships could 
vibrate less. This advice was the outpvit 
of a Fortran program that ran on a 
CDC Cyber and took as input the mea- 
surements of the components of the 
propeller shafts and readings from 
accelerometers magnetically attached 
to points as close as possible to the 
worst-vibrating points on the shafts, 
points that could be determined only 
when the ship was under way. This was 
where my skinny teenage arms came 
into play. 

I feel the same danger with some 
work I'm doing today on a service- 
oriented system. 

This is both a service-oriented 
architecture (SOA) of autonomous 
components and software as a service 
(SaaS), in which certain components 
are hosted and administered by their 
developers rather than handed over for 
local deployment. It's a serious system, 
with several tens of millions of dollars 
in transactions per year that could dou- 
ble or triple if my clients could couple 
their system to one of the trading part- 



ners in the system. How hard could it 
be, right? 

After initially avoiding the phrase 
"SOA," which just seemed another 
acronym-du-jour, I've come to see the 
phrase as a good description of the 
more successfvil architectures of the 
past few years. It's a valuable 
replacement for the phrase 
"Web service," which has 
come to mean the particular 
technologies of the WS-° 
stack, not an architectural 
choice. 

Although I'm generally 
skeptical of disconnecting 
systems discussions from 
technology discussions, the 
vagueness of "SOA" allows 
one to avoid platform biases and 
instead, to me, simply emphasizes the 
idea of a complex system made of inde- 
pendent processes coordinating their 
behavior by passing documents over 
networks (probably using Internet pro- 
tocols). SOA is essentially the time- 
honored structure of loosely coupled, 
highly cohesive modules applied to our 
modern, distributed, slow-networks- 
relative-to-RAM environment. As such, 
it's not surprising that svich architec- 




tures can generate a lot of value by dis- 
covering new combinations of old and 
new components and can do so with 
less integration effort — which are 
exactly the benefits of loose coupling 
and high cohesion. 

Yes, but. If there's one value that 
modern development, with 
its unit tests and continuous 
integration, emphasizes, it's 
repeatability. Service-orient- 
ed systems are very hard to 
nail down, especially when 
some components are pro- 
P vided by SaaS, where it's dif- 
^ ficult or impossible to break 
encapsulation, even for a 
laudable goal like setting the 
component to a known state 
for testing. 

Also, while you can often do a lot 
with mock services and testing data, in 
our case, one of the SaaS providers is 
so complex that it would probably liter- 
ally take years to simulate it properly. 

After a long day laboriously tracing 
message flows with the trading partner 
in question, we were having a couple of 
drinks when someone said, "If only we 
could interdict the messages before- 
hand, between X and Y That would 
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solve all this stuff." There was a long 
pause and then someone asked, "Well, 
why can't we?" The answer to that 
question was because the connection 
between X and Y was a live, unstop- 
pable feed involving millions of dollars. 
And that's when I began flashing back 
to my days in the engine room. 

One of the classic ways of connect- 
ing loosely coupled programs is the 
"Pipes and Filters" pattern, as exempli- 
fied in Unix shells and (finally) Win- 
dows PowerShell. Similarly, rather 
than sending messages back and forth 
in order to synchronize state, we're 
taking the normal input to our trading 
partner, transforming some data and 
adding new data before they ever see 
it, and then putting it back into the 
pipeline. With the appropriate XML 
hygiene, their existing system doesn't 
see any change to its inputs, just a valu- 
able increase in the quality of certain 
elements, and additional elements that 
can be used to develop the functionali- 
ty needed to win additional large con- 
tracts. 

I came out of my teenage job with 
both arms and the finest stereo system 
that $4.75 an hour could buy. I hope I do 
as well again. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his blog at 
www. knowinp. net. 



38 



INDUSTRY 



. Software Development Times . May 15, 2007 . 



www.sdtimes.com 



Development as a Service 



Industry Watch 




Customer relationship management 
has made Salesforce.com what it is 
today — a half-billion-dollar-a-year pur- 
veyor of hosted, on-demand software. 
It also is the Trojan horse, the wedge or 
the beachhead (depending upon your 
taste for metaphors) that gets the soft- 
ware-as-a-service pioneer in the door 
to show how much more can be done 
with the platform. 

"The developer just wants 
to write his application, not 
rebuild the infrastructure 
each time," said Steve Fisher, 
senior vice president at Sales- 
force and the man CEO Marc 
Benioff called "the visionary 
behind the architecture of the 
platform." 

And depending upon the 
type of application you're 
writing or business you're in, you need 
to consider such things as the operating 
system, database, app server and Web 
server. How to do disaster recovery. 
Then, there are Web services APIs, inte- 
gration, workflow and security. Monitor- 
ing. Patch management. Upgrades. And, 
if you happen to be an ISV, there is 
ordering, provisioning, licensing, renew- 
al, upgrading and the like. 

And then, what if you need that appli- 
cation to greatly scale? "It's my experi- 
ence at many different companies that 
there's not spare capacity lying around," 
Fisher said. "Each app is fairly siloed, 
and often you're dealing with it via a vir- 
tualization. Companies don't have a farm 
of servers ready to scale dynamically. 
That was a dream of dynamic computing, 
but it's not a reality." 

What is real is the Salesforce plat- 
form. And a new company called 
Bungee is offering up a hosted plat- 
form for development of rich Internet 
applications. This nascent space is 
coming to be known as "development 
as a service." 

Bob Bois, research director at ana- 
lyst firm AMB Besearch, likens Sales- 
force to eBay. "Anyone with a good 



idea or a product could now sell online 
[at eBay]," Bois said. "Now, if you have 
a good idea for software, you can use 
their platform to build the app, and 
Salesforce.com helps with marketing 
[and] sales. They're providing a soup- 
to-nuts infrastructure." Even a physical 
space to work, if you need one, in their 
Silicon Valley incubator. 

Despite his praise for the 
company, Bois does not 
expect enterprises already 
doing in-house development 
to move to the Salesforce 
platform. "If you're doing 
strategic custom apps, I'm 
not sure of the benefit," he 
said. "They won't build the 
infrastructure Salesforce has 
^ built." 
■**lti One of the main benefits 

of this type of development is economy 
of scale. Fisher said Salesforce is run- 
ning 29,800 customers on a single 
infrastructure. "There's better perfor- 
mance, and there is only one infra- 
structure to tune, not 30,000." This 
also enables Salesforce to instantly pro- 
vision a new customer with the same 
infrastructure as the others use. "We 
just add an entry in our list of cus- 
tomers, and they're live," Fisher said. 

Salesforce is building out from its 
original base in CBM applications, 
moving first into the financial markets. 
Bungee is going after the rich Internet 
application space with heavy doses of 
AJAX in its solution. But there will be a 
push to take development as a service 
into other areas, such as health care, 
insurance and other vertical markets. 
Analyst Dana Gardner of Interarbor 
Solutions said, "There's an opportunity 
to combine different kinds of develop- 
ment with different kinds of services on 
the support and infrastructure side." 

At the heart of the Salesforce plat- 
form is the concept of multitenancy. 
That's basically a shared infrastructure 
that allows each of the company's cus- 
tomers to perceive the environment as 



their own, even though all are running 
on the same common environment. 
Within that environment, Salesforce 
has created a metadata layer, which 
provides a separation between Sales- 
force's Java code and data model and 
what the customer perceives as his data 
model and his environment, Fisher 
explained. "The purpose of the meta- 
data layer is to give customers control. 
We define the parameters that tell the 
customers what they can do. We decide 
the macro limits; they do the cus- 
tomization and configuration." 

Will enterprises buy in? Large com- 
panies, with their own development 
staffs, might adopt this technique for 
one or two applications, such as CBM 
or a custom in-house human resources 
application. But these big development 
shops will continue to create their own 
infrastructure to support their busi- 
ness-critical, transactional applications. 
They're already doing their own devel- 
opment as a service, hosting their own 
apps on a platform they've purchased 
or created. 

This future, though, does look 
bright for small independent software 
vendors and individual creators that 
need an established platform. Updates 
are simple, adding new users a breeze. 
And, while enterprise developers are 
spending the bulk of their time main- 
taining their companies' systems, indi- 
viduals with bright ideas can now real- 
istically create an application on a 
hosted platform that will help the 
enterprise in some way, whether it's an 
application to track vacation and sick 
time used, travel or a host of other 
needs. 

Will there come a day when every 
type of application a company needs is 
hosted somewhere, and all enterprises 
will need to do is cobble together uber- 
apps out of the smaller apps available 
as services, with some degree of cus- 
tomization? Not likely. Applications 
still are big differentiators for compet- 
ing companies. Not all software is cre- 
ated equal, after all. I 

David Rubinstein is editor-in-chief of 
SD Times. 
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Embarcadero Technologies last month announced that it will 
be bought by private equity investor Thoma Cressey Bravo in 

a deal valued at US$200 million. Embarcadero stockholders will 
receive $7.20 per share. After the transaction closes in 
Embarcadero's second fiscal quarter, the company will no longer 
be traded publicly on the Nasdaq market. It will be privately 
held by an affiliate of Thoma Cressey Bravo. The move by 
Embarcadero follows a similar decision by Serena Software, 
which was purchased and taken private by SilverLake Partners 
in 2006 . . . VMware, a subsidiary of EMC Corp., will offer about 
10 percent of its stock in an initial public offering, with the intent 
of strengthening its ability to hire and retain top talent as the 
business grows . . . The Nasdaq market has notified The SCO 



Group of its intention to delist the company because it has 
failed to meet the minimum bid price requirement of US$1 for 
30 consecutive business days. SCO has until Oct. 22 to regain 
compliance, if the bid price of the stock exceeds $1 for a mini- 
mum of 10 business days. 

EARNINGS: Microsoft last month announced revenue of 
US$14.40 billion for the quarter ended March 31, driven by what 
the company called "robust demand" for the Windows Vista 
operating system and 2007 Microsoft Office. Those two prod- 
ucts helped push a 72 percent growth in earnings. Microsoft 
posted record profits for the quarter, with net income at $4.93 
billion. I 



EVENTS CALE 



RailsConf May 17-20 

Portland, Ore. 

O'REILLY MEDIA AND RUBY CENTRAL 

conferences.oreillynet.com/rails 



Open Source 
Business Conference 

San Francisco 
IDG WORLD EXPO 

www.linuxworldexpo.com/live/13 



May 22-23 



Lean and Six Sigma for May 22-23 
Software Development and IT 

Boston 
IQPC 

www.iqpc.com 



Tech-Ed 


June 4-8 


Orlando, Fla. 




MICROSOFT 




www.microsoft.com/events/teched2007 




SLAM 2007 


June 6-7 


Denver 




WEBCOM COMMUNICATIONS 




www.softwarebusinessonline.com/slam_conf2007Jndex.htm 



IBM Rational Software June 10-14 
Development Conference 

Orlando, Fla. 
IBM 

www-306.ibm.com/software/rational/events/rsdc2007 



eBay Developers 
Conference 

Boston 
EBAY 

ebaydevcon.com/devhome 



June 11-13 



Apple Worldwide 
Developers Conference 

San Francisco 
APPLE 

developer.apple.com/wwdc 



June 11-15 



Better Software June 18-21 

Conference & Expo 

Las Vegas 

SOFTWARE QUALITY ENGINEERING 

www.sqe.com/bettersoftwareconf 

BREW 2007 Conference June 20-22 

San Diego 
0UALC0MM 

brew.qualcomm.com/brew/brew_2007 

SOAWorld/Enterprise June 25-27 
Open Source Conference & Expo 

New York 
SYS-C0N 

www.soaeosconference.sys-con.com 

Open Source Convention July 23-27 

Portland, Ore. 
O'REILLY MEDIA 

conferences.oreillynet.com/os2007 

SIGGRAPH Aug. 5-9 

San Diego 

ASSOCIATION FOR COMPUTING MACHINERY 

www.siqqraph.org/s2007 



Agile 2007 

Washington, D.C. 
AGILE ALLIANCE 

www.agile2007.com 



Aug. 13-17 



Intel Developer Forum 

San Francisco 
INTEL 

www.intel.com/idf 



Sept. 18-20 



For a more complete calendar of U.S. software 
development events, see www.bzmedia.com/calendar. 
Information is subject to change. Send news about 
upcoming events to eventsiabzmedia.com. 
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Test -NET Delphi Java 
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Load Easy Stress Test Synchronized 
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WhtteBoxTest BlackBox Automated 

TestComplete™ 

X automate your tests 



New! Internet Explorer 7 Testing 
New! Fi ref ox Testi n g 
New! Windows Vista Testing 
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FREE TRIAL - DOWNLOAD NOW 

www.testcomplete.com 
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702-89 V9424 




Software is your business. 

Software security and quality is our business. 



The most comprehensive solution for individual developers or leading development organizations 

• Source code analysis 

■ Visualization and refactorfng 

* Metrics and trending 

Test our a ujard-uu inning technology on your own code. 
To arrange a free Code Defect Scan, go to 

w lu in. klQciiiDfk. com/assured. 



Klocwork 
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